SecurCube PhoneLog

Software for the analysis of phone records (CDR) and historical cell site location and information (HCSLI), namely the cell site analysis (CSA). The system grants a multilevel examination of the insights hidden to a preliminary analysis.

After the digital evidence gathering, the software Securcube® Phonelog helps investigators importing and parsing the data with a streamlined approach that captures the most relevant insight of the growing crime scenario. The system reflects investigators’ constant search of up-to-date digital forensics systems, where regardless do not forget the usability.

The software is compatible with worldwide cellular providers (carriers) and CDRs formats. It matches with mobile extractions from MSAB XRY, Oxygen Forensics and Cellebrite UFED. Furthermore, it can combine the results obtained with GPS tracks (.gpx), highway traffic logs and other data extracted from vehicles. Finally, it also compares the log files with real BTS (Base Transceiver Station) coverage, from Securcube® BTS Tracker.

Securcube® PhoneLog data examination and map out

CDR – Call Detail Record

Securcube® PhoneLog imports user, subscriber, IMEI/IMSI CDRs, cell site lists (.csv; .txt; .xls; xslx; .pdf, .doc, .docx, .rtf).

Securcube® PhoneLog examines the phone records (CDRs) produced by carriers. These files include information such as the incoming and outgoing mobile events (i.e. telephone calls, messages etc.), geo location according to the cell towers theoretical coverage and much more. Securcube® PhoneLog supports investigators with a complete range of ‘importers’ to parse correctly the CDRs. Besides, it provides a dedicated area to build up brand-new CDRs importers, if needed.

Mobile Extractions

Securcube® PhoneLog imports extractions from Cellebrite UFED (.ufdr), MSAB XRY (.xml), Oxygen Forensics (.xml).

The mobile extraction provides the recovered and deleted raw data from electronic devices. These data can be imported into Securcube® PhoneLog, so any detected contents such chats (whatsapp, skype, imessage, viber calls etc.), SMS, emails, geo locations and so on, they can be analyzed in comparison with other digital evidence (i.e. phone records).

Cell site & BTS real coverage

The ‘cell site lists’ are the files provided by the carrier to analyse CDRs in accordance to the time frame of the proceeding. These files offer a ‘theoretical’ coverage, namely carrier’s prediction of service, that does not consider the variables that could affect the signal (i.e. the weather, the network traffic, prioritization, roaming agreement etc.). Match correctly the historical cell site location information (HCSLI) and the one provided by tracker systems, such as Securcube® BTS Tracker, can support efficiently the correct examination of the suspects’ movements. Securcube® PhoneLog combines every data for the best correlation of hidden insights.

GPS Tracks

Securcube® PhoneLog correlates phone records, mobile extractions, BTS log files also with GPS tracks (.gpx) from tracking and sports devices, highway traffic logs and some other data extracted from vehicles. The position obtained is the starting point for a most effective match with other digital sources, firstly, CDRs.

Key Features:
  • Compatibility with more than 50 international telephone operators and more than 500 CDRs’ structures
  • Analytic capabilities
  • Multilevel analysis from basic to advanced
  • Supported data cleaning-up prior investigator’s authorization
  • Online and offline examination
  • Export of any data stored (.pdf; .txt; .xml, .gpx, .kml, etc.)
  • Validation by HASH code
  • Complete case folder with original files

  • In-depth search between ‘entities’ (users; subscribers; cells; IMEI/IMSI etc.)
  • Map outlook for the mobile movements (geographical mapping)
  • Check junctions between ‘entities’, with geo locations and time frames
  • Cross-analysis between mobile contents, phone records, cells coverage
  • Suspects’ events statistics and graphs interconnection with counterparts
  • Excellent functions for data visualization (pie charts; heatmaps; bar charts etc.)
  • Clear patterns of communication displayed
  • Multi case analysis among proceedings locally and remotely

Part No: