Cell Site Analysis
Definition
The use of records from mobile network operators showing which cell towers a device connected to and when, allowing investigators to establish the approximate geographic location of a device at specific times. Accuracy depends on cell density: urban areas with many small cells give finer resolution than rural areas with large cells.
- Data source
- Mobile network operator tower connection records
- Output
- Approximate device location over time
- Accuracy driver
- Cell density (urban vs rural)
- Urban resolution
- Finer, due to smaller cell coverage areas
- Rural resolution
- Coarser, due to larger cell coverage areas
Common questions
Can cell site analysis pinpoint an exact address?+
Generally not. It places a device within the coverage area of a serving cell, which can span a small urban block or many rural kilometres, so results are normally presented as a probable zone rather than a precise point.
What besides tower connections does a cell site analyst usually consider?+
A thorough analysis also weighs sector orientation, signal strength where available, known coverage overlaps between neighbouring towers, and any site survey data, since relying on tower location alone can overstate precision.
Related terms
- Chain of Custody
- The documented chronological record of who collected, handled, transferred, and examined a piece of evidence. For digital evidence, chain of custody includes...
- IMEI (International Mobile Equipment Identity)
- A unique 15-digit number permanently assigned to a mobile device's hardware. Used by networks to identify and block stolen devices, and by...
- Logical Acquisition
- An extraction method that uses the device's own operating system interfaces, such as iTunes backup or Android Debug Bridge, to export the...
- Packet Capture (PCAP)
- The interception and recording of network packets as they traverse an interface. The raw data is stored in PCAP format and analysed...
- Physical Acquisition
- An extraction method that reads the raw flash storage of a mobile device, bypassing the operating system. Produces a bit-for-bit image of...