Telecoms examination

Sub-specialties: Call data (network CDRs) capture, Call data (network CDRs) examination, Equipment capture, Equipment examination

Telecoms specialists are involved in the retrieval, identification, examination and assessment of data held in telecoms equipment.

In general, but not always, this will apply to equipment connected to a public telecoms network - for example phones, fax machines, pagers, telecoms systems). Some telecoms specialists work with data retrieved from physical apparatus such as phones, SIM cards and pagers. Others scrutinise network and traffic logs in the form of call data records (network CDRs) and undertake cell site analysis. Some practitioners perform both these functions.

Capture involves the retrieval of relevant material from the subject source by a forensically sound process and the creation of check data and logs to permit future verification.

Examination involves the identification and examination of data or equipment that may be relevant to a case and the production of information or exhibits to assist investigators or the court.

Note: We distinguish between the investigative stages in this specialty and the evaluative stage, which forms the specialty of Telecoms evaluation under the Science & Engineering Sector. Some practitioners work in only one stage of the process, some in two, and a few in all three.

You are welcome to apply for registration in more than one area, but you should consider carefully whether you are likely to meet the required standard. You should not apply in evaluation if you do not prepare opinion evidence.

Telecoms

Some telecoms specialists work with data retrieved from physical apparatus such as phones, SIM cards and pagers. Others scrutinise network and traffic logs in the form of call data records and undertake cell site analysis. Some practitioners perform both these functions.

Evaluation involves the assessment of data or equipment in the context of other evidence in the case, the drawing of deductions, construing significance, the consideration of alternative hypotheses and the expression of opinions, particularly about the actions of users.

Note: We distinguish between the evaluative stage in this specialty and the investigative stages (capture and examination) which form the specialty of Telecoms examination under the Incident Investigation Sector. Some practitioners work in only one stage of the process, some in two or three, and a few in all four.

You are welcome to apply for registration in more than one area, but you should consider carefully whether you are likely to meet the required standard. You should not apply in evaluation if you do not prepare opinion evidence.

Download an application pack