Devlan: Automated Acquisition of Digital Evidence from Large Networks

This project describes the architecture of a tool based on this paradigm, known as Devlan (Digital EVidence from LArge Networks), and present a plan to design, develop, test, demonstrate, and disseminate it. Devlan uses an open architecture to draw on the network's inherent capabilities, applying them to the acquisition of evidence, and is designed to fulfill relevant legal requirements, such as the limits of warrants, the obligation to find exculpatory evidence, and the evidentiary requirements of authentication and chain-of-custody.nca/ncf