← The arsenal
INT-01 · CDRDeployed · use case

Sanjaal

संजाल

the web / the network — CDR & tower-dump intelligence

When a dozen phones belong to one plot, can you see the plot — not just the calls?

A conspiracy hides in the links between suspects: who coordinates, which unknown number ties them together, where they met. Read one CDR at a time and you miss it. Sanjaal reads them together.

The situation · multi-suspect

A cell of suspects, several CDRs, one planned network

Sanjaal · conspiracy decode playing
MEETING!HANDLERCOORDINATORNETWORK MAPPED
Six suspects · six call-detail records

Each suspect's record is just a contact list. Cross-analysed, they reveal the structure: the spokes, the off-roster handler reaching several of them, the most-central coordinator, and the serving-cell where two of them were together. The network — and where to look first — falls out.

How it plays out

From a stack of CDRs to the cell, step by step

  1. 01

    Add every suspect's CDR

    Drop two or more suspects' call-detail records — no fixed limit, added one by one. Each is parsed and analysed entirely on the device; nothing leaves the room.

  2. 02

    Who contacts whom

    The engine builds the inter-suspect link chart: who calls or texts whom, how often, in which direction, and when — the skeleton of the cell.

  3. 03

    The handlers they share

    It surfaces the external numbers that several suspects reach independently — the off-roster handler or broker none of them 'owns', often the hidden coordinator.

  4. 04

    Where they met

    Serving-cell co-presence within a time window flags possible physical meetings — and the planning-window bursts of activity that precede a coordinated act.

  5. 05

    Key players & routes

    An RSN, training-free classifier types the network against documented conspiracy topologies, ranks the key players (coordinator, brokers, cell-leaders) and traces the command and cut-out routes.

  6. 06

    Prioritised, court-ready leads

    Every finding is a glass-box lead anchored to source rows — who to pull first, what to corroborate — exported as an evidence pack. All deterministic and auditable.

What it means for you

The bottom line

  • Decodes a multi-suspect conspiracy: the cells, the coordinator, the shared handlers, the meetings — in one picture.
  • Training-free RSN typing against documented network archetypes; every call is explainable, not a black box.
  • Runs entirely on the agency's own machine — sensitive CDRs never leave the room.
  • Every inference is an investigative lead requiring corroboration; structure is surfaced, intent stays with the analyst.
Also

Sanjaal is equally robust on a single suspect — the full forensic picture from one CDR: contacts & roles, the link chart, movement and pattern-of-life, the geo-fence, RSN anomaly scoring and prioritised leads. The multi-suspect conspiracy mode above is where it goes furthest.