-
ShippedWindows (x64)
DEVI Validate
An offline, read-only evidence hash checker. It checks SHA-256, SHA-1, and MD5 against sum files, CSV, and FTK Imager logs, and it writes a PDF verification record.
-
ShippedWindows (x64)
DEVI Decrypt
An offline Windows utility for decrypting Apple and iCloud OpenPGP provider returns. Apple only for now.
-
ShippedWindows (x64), JSON and YAML
DEVI Registry
A sourced JSON and YAML database of application and artifact metadata for examiners, with an offline Windows app to look an app up. It shows its work: every record cites its sources and says how far each claim was checked, so a finding can be explained.
-
Coming soon
DEVI Reader
In private testing. Available by demo.
Compare the tools
Three tools for three jobs. Each runs on your own computer, and each page lists what it does and what it does not claim.
| DEVI Validate | DEVI Decrypt | DEVI Registry | |
|---|---|---|---|
| For | Prove the evidence has not changed | Open Apple and iCloud returns offline | Know where an app keeps its data |
| Reads | An evidence folder or files, and the hash list recorded earlier | An Apple or iCloud OpenPGP provider return (.gpg or .pgp), or a whole return folder | An app name, an Android package, or an Apple bundle ID |
| Gives you | Match, Mismatch, Missing, or Extra for every file, and a PDF record | The decrypted output, hashed and checked, and a PDF record | One card per app, each claim with its source |
| Runs on | Windows (x64) | Windows 11 (x64) | Windows (x64), JSON and YAML |
| Network | Only the optional update check | Only the optional update check | Only the optional update check |
| Latest | v1.0.3 | v1.0.3 | v1.0.4 |
| One-page sheet (PDF) |
How to get a tool
- Create an account. Sign up at deviops.app with the email you want to use for DEVI.
- Complete your profile. Who you are (law enforcement, prosecution, defense or contractor), your agency or firm, your role, and a supervisor or point of contact.
- Request each tool. Give a short reason and accept the license agreement. Each tool is approved on its own.
- The DEVI Ops Team reviews it. We email the decision to your sign-in address.
- Who qualifies
- Verified law enforcement, prosecution, defense and contractor examiners.
- Review time
- We review every request, usually within the same business day.
- Cost
- Each approved account gets a monthly allowance that refills each month. Opening and viewing evidence never uses it.
Questions
Is there a cost to request a tool?
No cost to request. Each approved account gets a monthly allowance that refills each month. Opening and viewing evidence never uses it.
Why is an account needed?
The tools are licensed to approved examiners only. Your account is how DEVI Ops confirms who you are, records the license you accepted, and checks your approval on every download.
Does DEVI see my case data?
No. The tools work offline on your computer. Your evidence, keys, file names and hashes are never sent to DEVI.
What if SmartScreen warns me?
Check the file's SHA-256 on its tool page first. Windows can still show a SmartScreen warning for a newly signed release; that is reputation, not a failed signature. If it does, choose More info, then Run anyway.
Which Windows versions are supported?
Windows x64. DEVI Validate and DEVI Registry run on Windows (x64), and DEVI Decrypt needs Windows 11 (x64). The .NET runtime is included in each download.
Can I share a license?
No. A license is for you, under the account that was approved. Each examiner requests access with their own account.
SmartScreen. Windows can still show a SmartScreen warning for a newly signed release; that is reputation, not a failed signature. If it does, choose More info, then Run anyway.
How the tools are published
- A checksum for every fileEach published file has a SHA-256 on its tool page, with the Windows commands to check it.
- Downloads for approved accountsEach tool is approved on its own, by the DEVI Ops Team. Create an account, complete your profile, then request a tool from your account. The pages that describe the tools stay public.
- Validate before you rely on itValidate each tool under your lab's own procedures.
More tools will be shared here.
Every release is published with its SHA-256 hashes, and the Windows apps are Authenticode-signed. Trust and Security shows how to check a download.