Email - sam@raincock.co.uk     Call -  01434 600635

 Telecoms

Sam Raincock Consultancy provides expert witness services in device evaluations (phone handsets and tablet devices), connection analysis/behaviour, attribution evidence and cell site analysis. These sources of evidence can be combined and also include computer forensics where required.  

Sam started her career in extracting data from phones over 18 years ago and throughout that time has continued to specialise in phones and phone data.   She is able to assist with cases involving alleged use of Encro Phones (EncroChat) as part of Operation Venetic and Spoofed use (e.g. Cloud9) including assisting you obtaining the required data.   Sam is also a specialist in location forensics to determine evidence with respect to logged use of vehicles and digital devices (including phones).

Some modern telecoms cases are very complex involving large case bundles, large sets of data and Sam appreciates it can be difficult knowing where to start.   Sam is able to evaluate complex telecoms cases assisting you taking the case forward in a manageable (and cost and time effective) way.   She can provide initial overviews in cases to determine what you have, what you need to request and also suggest ways forward with pursing the case including assisting you formulating instructions and questions to be addressed.  

All cases are examined by Sam and involve evaluation to expert witness level (opinion based evidence).  Sam appreciates that this may not be required in cases where you may only need phone data to be extracted, and/or for tables of connections/maps and/or a printout/extraction of phone content to be supplied, however, this is not something Sam provides as a service since she is best at complexity.   Typically instructions are 40+ hours of work, although where Sam is available, she may be able to undertake a smaller instruction (with a minimum time of 25 hours).   
Evaluation of Data on Mobile Devices

Modern mobile handsets and tablet devices can store over 1+ million of pieces of information.   Sam specialises in the interpretation of the evidence in order to address the forensic questions of how? the data came to reside on the device, where? the device was at, when? it occurred and the evidence of who? was using the device at the relevant times.

Sam is able to undertake instructions in cases involving alleged illegal material including indecent images of children (IIoC), extreme imagery, prohibited imagery and evidence associated with terrorism offences (including possession of articles).    Where computers are also present in the case, she can work as a single instructed expert.

SRC specialises in providing detailed chronologies of use of mobile and tablet devices at specific date/time periods of significance in cases including evaluating location evidence stored on the device (which may include specific location logs, WiFi use, cell/Wifi scans performed automatically by the device, mapping/sat nav applications use etc.), imagery captured, communications, and any other potential evidence stored including things such as unlocking & charging events and even to the detail of when the phone screen is lit up or otherwise.   This type of detailed chronology of use may involve the evaluation of 10,000+ piece of information per day to determine a full picture of the phone activity.  

Since 2nd October 2023, mobile device forensics requires Compliance with the Code of Practice from the Forensic Regulator. SRC is currently non-compliant and does not have ISO17025 accreditation.  A full discussion of the implications of this will be provided with you prior to instruction, and where the instruction is accepted, the required non-compliance declarations made.

What are Phone Downloads?

There are multiple ways in which a modern smart phone (such as an iPhone/Android device) can be downloaded and the information from them presented.  What is meant by a modern "phone download" is not a set term like it is for computer forensics. Instead the software/hardware used to 'download' and the interpretation of this 'download' material differs.  Sam can advise you what will be required/need requesting and specialises in evaluating data in cases involving full extractions from phones including Graykey images.


Encrypted/Spoofed Devices


Sam is has been instructed in a substantial number of Encro Phone cases (EncroChat) as part of Operation Venetic involving assessing the Encro Phone data in cases involving the alleged importation of drugs at over the 1kg level.  She has conducted nearly 2,000 hours of research, development and casework involving the data in these cases since August 2020.   She can also add an evaluation of the call data and cell site analysis evidence in these cases.


SRC is also able to take instructions in Cloud9/Spoofing Cases including full reviews of the raw data and assisting you obtaining the required data from the network providers/Crown.

Location Forensics


SRC's further specialism is in the evaluation of where a device/vehicle/person or otherwise has been in a field known as location forensics. Such evidence may be obtained from information stored on telephone handsets or computers, vehicles (in the form of telematics/GPS systems, trackers and vehicle applications), sat nav units and also via cell site analysis. SRC can also assess the best source (or combining various types) of location evidence available in cases.

 Connections and Connection Behaviour

Sam has spent over 18 years manually evaluating and viewing raw call data records and noting issues and anomalies to ensure that examinations performed are accurate and the data interpreted correctly.    She specialises in cases which require consideration of these raw records where it is essential to establish if calls were answered, how long the call rang prior to being answered (and the meaning of this), if an SMS message was delivered etc.  or where the connections need to be manually checked.    Manual checking of connections/cell site usage by an expert is recommended by software suppliers used to process and prepare connection tables/maps, particularly at critical times or issues in a case.

Sam usually combines this type of analysis with activity and communication present on mobile handsets, cell site analysis and/or attribution evidence.   She can also provide behaviour analysis in cases where it is necessary for such usage data to be fully considered and/or to compare use between attributed phones or the dataset as a whole.
Attribution Assessments

Attribution evidence involves assessing all of the available evidence (such as connection behaviour, cell site analysis, handset usage and otherwise) in order to establish the full extent of the evidence to assist the Court with who may have been using a telephone in general or at a particular time.  This may be used to ascertain if the use of telephone(s) is consistent/inconsistent with use by certain parties and may involve complex analysis such as co-location assessments with other phones, ANPR, CCTV, vehicle forensics and other evidence. 

Required Data

SRC does not supply generic/theoretical statements since digitally the possibilities are endless and specific use only applies to the actual use/evidence in your case.  Instead SRC fully considers what has happened in your case and with that can also fully consider any defence statements or otherwise including fully testing an alternative hypothesis and commenting on the limitations. 

SRC can assist you obtaining the data disclosure required including providing you with the correct technical wording for requesting your disclosure and to manage the disclosure of data from the CPS/police/CTU or digital forensic unit (including signing required MOUs).    For phone downloads and other digital devices this will be specific to your case which Sam can provide to you in order to assist obtaining the disclosure required.   Note that PDF reports will not be acceptable. 

When instructing or contacting SRC it is useful if you can initially supply the following:
  1. Trial date (including schedule time) and any Court or other deadlines.
  2. Call data records (where applicable and available).
  3. Details of defence/defence statement and instructions of what may be required.
  4. Statements and reports in relation to the technical evidence and seized digital devices.
  5. MG5 and/or case bundle.
In the event you require call data records and these have not been disclosed to you, you should request the following as soon as possible:

“The original, complete and unredacted PDF and spreadsheet call data records including full cell information for standard use, data use and DDR information (where available) for telephones <insert numbers>”.  

In the event have a large telecoms case, SRC can provide you with initial reviews to assist with establishing what may be required and can provide assistance in all telecoms and digital evidence areas.

Sam is primarily a criminal practitioner. She does take on a limited number of other matters particularly if they involve the investigation of a death or involve children.  Please provide details of your case when initially contacting.  Note that for all cases, it will be essential that you ascertain written permission for access to the devices and data in full (for handsets/computers this will be everything stored including possibly deleted data) since without this SRC will be unable to progress the case. You will need where possible to establish what the handsets (make and models) are involved.  Please also provide details of any case deadlines or otherwise.

For details of previous telecoms cases SRC have been instructed see Sam's previous case list.
Share by: