Software for the analysis of phone records (CDR) and historical cell site location and information (HCSLI), namely the cell site analysis (CSA). The system grants a multilevel examination of the insights hidden to a preliminary analysis.
After the digital evidence gathering, the software Securcube® Phonelog helps investigators importing and parsing the data with a streamlined approach that captures the most relevant insight of the growing crime scenario. The system reflects investigators’ constant search of up-to-date digital forensics systems, where regardless do not forget the usability.
The software is compatible with worldwide cellular providers (carriers) and CDRs formats. It matches with mobile extractions from MSAB XRY, Oxygen Forensics and Cellebrite UFED. Furthermore, it can combine the results obtained with GPS tracks (.gpx), highway traffic logs and other data extracted from vehicles. Finally, it also compares the log files with real BTS (Base Transceiver Station) coverage, from Securcube® BTS Tracker.
Securcube® PhoneLog examines the phone records (CDRs) produced by carriers. These files include information such as the incoming and outgoing mobile events (i.e. telephone calls, messages etc.), geo location according to the cell towers theoretical coverage and much more. Securcube® PhoneLog supports investigators with a complete range of ‘importers’ to parse correctly the CDRs. Besides, it provides a dedicated area to build up brand-new CDRs importers, if needed.
The mobile extraction provides the recovered and deleted raw data from electronic devices. These data can be imported into Securcube® PhoneLog, so any detected contents such chats (whatsapp, skype, imessage, viber calls etc.), SMS, emails, geo locations and so on, they can be analyzed in comparison with other digital evidence (i.e. phone records).
Cell site & BTS real coverage
The ‘cell site lists’ are the files provided by the carrier to analyse CDRs in accordance to the time frame of the proceeding. These files offer a ‘theoretical’ coverage, namely carrier’s prediction of service, that does not consider the variables that could affect the signal (i.e. the weather, the network traffic, prioritization, roaming agreement etc.). Match correctly the historical cell site location information (HCSLI) and the one provided by tracker systems, such as Securcube® BTS Tracker, can support efficiently the correct examination of the suspects’ movements. Securcube® PhoneLog combines every data for the best correlation of hidden insights.
Securcube® PhoneLog correlates phone records, mobile extractions, BTS log files also with GPS tracks (.gpx) from tracking and sports devices, highway traffic logs and some other data extracted from vehicles. The position obtained is the starting point for a most effective match with other digital sources, firstly, CDRs.
Compatibility with more than 50 international telephone operators and more than 500 CDRs’ structures
Multilevel analysis from basic to advanced
Supported data cleaning-up prior investigator’s authorization
Online and offline examination
Export of any data stored (.pdf; .txt; .xml, .gpx, .kml, etc.)
Validation by HASH code
Complete case folder with original files
In-depth search between ‘entities’ (users; subscribers; cells; IMEI/IMSI etc.)
Map outlook for the mobile movements (geographical mapping)
Check junctions between ‘entities’, with geo locations and time frames
Cross-analysis between mobile contents, phone records, cells coverage
Suspects’ events statistics and graphs interconnection with counterparts
Excellent functions for data visualization (pie charts; heatmaps; bar charts etc.)
Clear patterns of communication displayed
Multi case analysis among proceedings locally and remotely