One Device Is Not the Case

Date: Wednesday, 14 October 2026
Time: 11:30 SGT  |  14:30 AEDT  |  16:30 NZDT  |  09:00 IST
Duration: 60 minutes, including live Q&A

Why this session:

On a serious matter you will seize five phones and hand one to each analyst. Each writes up their device, and the case is quietly cut into five pieces that never join. The controller behind the courier, the co-location on the night, the money moving between them: none of it lives on any single handset, so none of it is ever seen.

Single-device review does not just miss evidence. It isolates the investigator from their own case. This session shows what changes when you review the evidence as one connected picture: every device and every record, resolved to people, and laid out as a network, a timeline, and a map. You walk into the interview seeing the whole case, not one phone.

Built by practitioners, for practitioners. Operational method, real case law, every claim sourced.

What you will learn:

• The single-device silo: how device-by-device review fragments a case and hides the network
• The multi-device reality: why serious offenders always run multiple devices, and where the connecting evidence actually lives
• Connected evidence review: bringing every device and record into one case, resolving identifiers to people, and working by network and timeline
• What connects across devices: shared contacts and accounts, communications and call records, cell-site movement, and shared media hashes
• Admissibility: recent case law rewarding network-derived evidence, and keeping every inference corroborative rather than conclusive

Who should attend:

• Investigators, intelligence analysts, and their supervisors who build cases from multiple devices, across serious and organised crime, scams, drugs, and counter-terrorism.
• Cannot make the time? Register anyway and we will send you the recording.

Powered by Cellebrite Pathfinder

The connected review techniques in this session are what Cellebrite Pathfinder is built for. If you already run Pathfinder, you will see how to get more from it. If you do not, you will see what connected review makes possible.

Core functions we will draw on

• Link and network charts: who contacts whom, across every device in the case
• Timeline analysis: the sequence that joins a call, a payment, and a movement
• Maps and geolocation: movement and co-location, plotted from device and record data
• Entity resolution and attribution: collapsing many numbers, handles, and handsets into one subject
• Watchlists: a subject surfaces the moment their identifier appears in newly added data
• Ingestion at scale: UFDR and UFD device extractions plus call charge record data in one case
• Shared casework and reporting: one case, worked as a team, with a defensible audit trail

New for existing users: recent Pathfinder releases have strengthened telecommunications and call charge record ingestion, entity resolution, and mapping. We will spend a few minutes on the latest updates and the workflow habits that get the most from them. Version and feature detail confirmed live against your deployment.

The IIU sits between Investigations, Intelligence, and Digital Forensics. The team works directly with case officers, analysts, and unit commanders across the region.