Software for the analysis of phone records (CDR) and historical cell site location and information (HCSLI), namely the cell site analysis (CSA). The system grants a multilevel examination of the insights hidden to a preliminary analysis.
After the digital evidence gathering, the software Securcube® Phonelog helps investigators importing and parsing the data with a streamlined approach that captures the most relevant insight of the growing crime scenario. The system reflects investigators’ constant search of up-to-date digital forensics systems, where regardless do not forget the usability.
The software is compatible with worldwide cellular providers (carriers) and CDRs formats. It matches with mobile extractions from MSAB XRY, Oxygen Forensics and Cellebrite UFED. Furthermore, it can combine the results obtained with GPS tracks (.gpx), highway traffic logs and other data extracted from vehicles. Finally, it also compares the log files with real BTS (Base Transceiver Station) coverage, from Securcube® BTS Tracker.
Securcube® PhoneLog imports user, subscriber, IMEI/IMSI CDRs, cell site lists (.csv; .txt; .xls; xslx; .pdf, .doc, .docx, .rtf).
Securcube® PhoneLog examines the phone records (CDRs) produced by carriers. These files include information such as the incoming and outgoing mobile events (i.e. telephone calls, messages etc.), geo location according to the cell towers theoretical coverage and much more. Securcube® PhoneLog supports investigators with a complete range of ‘importers’ to parse correctly the CDRs. Besides, it provides a dedicated area to build up brand-new CDRs importers, if needed.
Securcube® PhoneLog imports extractions from Cellebrite UFED (.ufdr), MSAB XRY (.xml), Oxygen Forensics (.xml).
The mobile extraction provides the recovered and deleted raw data from electronic devices. These data can be imported into Securcube® PhoneLog, so any detected contents such chats (whatsapp, skype, imessage, viber calls etc.), SMS, emails, geo locations and so on, they can be analyzed in comparison with other digital evidence (i.e. phone records).
The ‘cell site lists’ are the files provided by the carrier to analyse CDRs in accordance to the time frame of the proceeding. These files offer a ‘theoretical’ coverage, namely carrier’s prediction of service, that does not consider the variables that could affect the signal (i.e. the weather, the network traffic, prioritization, roaming agreement etc.). Match correctly the historical cell site location information (HCSLI) and the one provided by tracker systems, such as Securcube® BTS Tracker, can support efficiently the correct examination of the suspects’ movements. Securcube® PhoneLog combines every data for the best correlation of hidden insights.
Securcube® PhoneLog correlates phone records, mobile extractions, BTS log files also with GPS tracks (.gpx) from tracking and sports devices, highway traffic logs and some other data extracted from vehicles. The position obtained is the starting point for a most effective match with other digital sources, firstly, CDRs.