I do not believe this is going to work at all. Analyzing encrypted data should not reveal anything actionable. Even when analyzing unencrypted data from clients. I do not see a way to actually catch wall hackers. The reason why one cannot catch wall hackers is because there is no inherent difference in (encrypted) communications between a wall hacker and a highly skilled individual.