Delta 4G/12G. Countersurveillance sweeping system. User s Manual. Under control of DigiScan EX software, version 3.2

Transcription

1 Delta 4G/12G Countersurveillance sweeping system Under control of DigiScan EX software, version 3.2 User s Manual

2 Content 1. About the Delta system... 3 Features... 3 Technology... 3 Specifications... 4 Supplied set Setup Connections Drivers after connection for the first time Startup Brief description of controls RF sweep Sweep with 1 antenna (RF background) Sweep with 2 antennas Parameters of the Sweep task Danger level Manual mode Control mode Spectrum Control mode Frequency Spectrum Sonogram Detector-Locate Digital (pulse) transmissions GSM, Wi-Fi, 3G, LTE, DECT, etc IQ constellation AC 110/220V Telef/Low volt.line Audiomodulation IR Range Electromagn.range Microwave (MW) frequency range Parameters Settings - Scheduler Settings - Ranges Database Signals Bandscopes Sound recording Usage with the wide-band receivers Connection Radio monitoring, Scan Range task Scan DB task Frequency Watch task

3 1. About the Delta system Features Quickly and reliably detects eavesdropping devices which use the RF waves, wires and infrared beams for transmission of information from the premises Types of detected bugs: VHF/UHF radio microphones, GSM/3G bugs (GSM baby), digitally encrypted radio microphones, telephone transmitters, AC/telephone line/ethernet currier transmitters, hidden video cameras with transmitters, microphones with transmission via the infrared beams, hidden electronic devices in objects 2-antenna analysis provides quick selection of the RF signals originating from the checked rooms not depending on the modulation type Measurement are accomplished with the help of the modern digital receiver, providing spectrum analyzing possibilities with the scan rate of 50 MHz per second at 12.5 khz resolution Detects intermittent (non-constant) signals with the help of the Sonogram function Wide frequency range covered: 5 khz 4400 MHz (ver. 4G) and 5 khz MHz (ver. 12G) Built-in low-frequency convertor provides features for inspection of the wires, electro-magnetic range and the infra-red range Working modes: RF sweep, Microwave, AC check, TLF check (telephone/low-voltage wire), IR check (infrared optical range), MLP check (electromagnetic probe), Detector-Locate Detector-Locate mode allows the operator to find the physical location of the transmitter Digital communication sources (GSM, Wi-Fi, Bluetooth, 3G, LTE, Wi-Max, etc.) can be inspected and located Automatic data logging provides possibility to accumulate signal s history during the searches Wide set of graphical elements: Spectrum (current, max, min, remote antenna, threshold, etc.); Sonogram; IQ constellation; Oscilloscope; FFT-spectrum; FM/AM demodulation with selectable bandwidth Analysis of the modulation in the IQ constellation window Database stored in Microsoft Access format Recording of demodulated audio; High quality RF antennas and VLF-probes included in the supplied set: 2 omnidirectional ODA-4 antennas; 1 microwave MWA-6 antenna; 1 microwave MWA-12 antenna (for version 12G only); 1 infrared IR-LINE probe; 1 electromagnetic MLP-LINE probe; 1 110/220V probe AC-LINE; 1 telephone line/low voltage probe. Technology The spectrum analyzing technology used in the Delta provides the professional level of sweeping, giving full information about the radio frequencies being used in the area to the operator practically without necessity to move the equipment within the territory. The digital receiver used in the Delta has much longer distance of detection in comparison to the conventional RF detectors, so the sweeping procedure can be performed quickly and covertly, room by room. The system can be placed both inside the room being checked and in an adjacent premise to provide secrecy of operation. 3

4 The 2-antenna analysis used in the Delta allows you to detect RF bugging devices not depending on the type of modulation and encryption. Its working principal is based on the nature of radio waves to decrease power proportionally to the distance to the source. Signal on the close antenna will be stronger than the one received in the remote antenna. Such the DigiScan EX Delta system quickly selects the transmissions which originate from the inside of the premise. The system has a built-in high-quality antenna switcher. After the sweeping the operator can perform the location procedure and find the exact location of the bug. In addition to the RF analysis the Delta has the possibility to check the wire communications, infrared range and electromagnetic range for presence of illegal signals. For this aim the system includes a low-frequency converter. The Delta system and its software DigiScan EX have a simple intuitive interface and do not demand special knowledge from the operator. Typically the operation is performed in 3 stages: 1) placement of the antennas or probes; 2) pressing the corresponding operation button; 3) watching the results. At the same time professionals will find many high-grade possibilities and settings, which can be useful for deeper learning of RF environment at a further usage. Specifications General RF frequency range: 4G: 50 khz 4400 MHz 12G: 50 khz MHz Scan rate: 4G: 75 MHz per second 12G: 50 MHz per second Resolution: 12.5 khz Displayed dynamic range: -90 dbm to -10 dbm Demodulation: FM/AM Demodulation bandwidth: 240/120/60/30/15 khz Audio bandwidth (VBW): adjustable 22kHz 1 khz Attenuator: PRE-AMP, 0dB, 5dB, 10dB and 15dB Inputs: 3 antenna inputs; 4 probe inputs Software: DigiScan EX, version 3.0 or newer Selectable span (manual mode): 50 MHz, 25 MHz, 10 MHz, 5MHz and 2 MHz Detection of pulse transmissions: yes, pulse mode on Observe mode: frequency domain (spectrum); time domain (demodulation) Graphic windows: spectrum of wide range (selectable span between 1.5 to 3000 MHz), signal s spectrum, IQ constellation, oscilloscope, FFT-spectrum Real-time I/Q data streaming: at 240 khz bandwidth Compatibility: Windows XP, Windows Vista, Windows 7, Windows 8 Power source: 220 (110) V ODA-4 omnidirectional antenna Can be used with any RF equipment, including receivers, spectrum analyzers, RF detectors, etc. Frequency range MHz Tripod mountable (tripod supplied) The tripod can convert to a hand-held unit for manual probing (locating procedure) Connector type: BNC 80 cm cable Dimensions (without tripod) 20 x 3.5 x 0.6 cm Mode of use: receive Indoor use only MWA-6 microwave antenna Can be used with any RF equipment, including receivers, spectrum analyzers, RF detectors, etc. Is particularly good for the location of GSM, CDMA, 3G, 4G (LTE, Wi-Max), Wi-Fi 2.4GHz, Bluetooth, Wi-Fi 5GHz, DECT and other digital transmissions Perfectly suited for Delta 4G/12G, Protect 1206i, Protect 1207i Frequency range MHz Directed (log-periodic) Typical forward gain: 6 dbi Tripod mountable (tripod supplied) The tripod can convert to a hand-held unit for manual probing (locating procedure) Connector type: SMA 80 cm cable Dimensions (without tripod) 18 x 14.5 x 0.7 cm Mode of use: receive Indoor use only MWA-12 microwave antenna 4

5 Can be used with any RF equipment, including receivers, spectrum analyzers, RF detectors, etc. Is particularly good for locating digital transmissions above 2GHz: 4G (LTE on the upper ranges, Wi-Max), Wi-Fi 2.4GHz, Bluetooth, Wi-Fi 5GHz; For tracing other microwave sources, including bugging devices Perfectly suited for the Delta 12G, Protect 1206i, Protect 1207i Frequency range MHz Directed (log-periodic) Typical forward gain: 8 dbi Tripod mountable (tripod supplied) The tripod can convert to a hand-held unit for manual probing (locating procedure) Connector type: SMA 80 cm cable Dimensions (without tripod) 8 x 6 x 0.7 cm Mode of use: receive Indoor use only IR-LINE infrared probe Used in Delta 4G/12G systems for the tracing of illegal infra-red beams (IR bugs) Frequency range 50 khz 4 MHz Directed (angle 15 ) IR filter rejects optical range Tripod mountable (tripod supplied) The tripod can convert to a hand-held unit for manual probing (locating procedure) Connector type: MiniDIN8 120 cm cable Dimensions (without tripod) 9.5 x 6.2 x 3 cm MLP-LINE electromagnetic probe Used in Delta 4G/12G systems. Detects electronics emitting an electromagnetic field Frequency range 50 khz 4 MHz Omni-directed 360 Tripod mountable (tripod supplied) The tripod can convert to a hand-held unit for manual probing (locating procedure) Connector type: MiniDIN8 120 cm cable Dimensions (without tripod) 18 x 6.2 x 3 cm AC-LINE probe for 110/220V wires Used in Delta 4G/12G systems for the detection of illegal signals in 110V/220V wires Frequency range 50 khz 12 MHz Compatible with 110V and 220V Connector type: MiniDIN8 120 cm cable Dimensions 8 x 7 x 3 cm Telephone/low voltage probe Used in Delta 4G/12G systems for the detection of illegal signals in telephone and other low-voltage wires Frequency range 50 khz 12 MHz Maximum voltage 100V Connectors: 1) modular telephone plug 6P6C; 2) alligator connector Extendable cable up to 6 meters Telephone splitter supplied 5

6 Supplied set # Item 4G 12G 1 DigiScan EX software on USB-flash drive Digital Receiver SignalHound 4.4 GHz or 12.4Ghz USB-cable for the digital receiver Controller DSC USB-cable for the DSC AC power adapter for DSC DS-Line 2 Pro, VLF-convertor Interconnection cable DS-Line 2 Pro DSC BNC-BNC cable BNC-SMA cable ODA-4 omnidirectional antenna High quality RF extension cable for ODA-4 antenna (20 meters) MWA-6 microwave antenna MWA-12 microwave antenna AC-LINE, probe for AC wires IR-LINE, infrared probe MLP-LINE, electromagnetic probe Telephone/Low voltage probe Extension cable for probes, 10 m 1 1 Cable DS-L-AR8200 for AR8200 On request Cable DS-L-SND for IC-R1500/2500 6

7 2. Setup Setup process consists of two stages: 1) Setup of the receiver s software and driver 2) Setup of the DigiScan EX software and driver To install the receiver s software: 1) Open the RECEIVER folder on the supplied flash drive and run the InstallSignalHound.exe Or download the latest version of the software from the and run it 2) Follow the setup steps of the SignalHound installation program to install the software and drivers 3) Connect the SignalHound receiver to the computer and start the SignalHound software to make sure the drivers has been installed correctly. In some cases rebooting of the computer might be necessary. After making sure the SignalHound software starts OK with the connected receiver, close it Installation of the DigiScan EX software: 1) Start the DigiScan EX Setup.exe 2) Select the language of the installer program 3) Select the install location 4) Choose the Start menu folder 5) Specify the additional options and press Install 3. Connections The DS-Line 2 Pro should be connected with the DSC-003 by the supplied interconnection cable. ODA-4 with extension cable ODA-4 with extension cable Coax cable + SMA-BNC cable (supplied) Interconnection cable 1 x USB for DSC x USB for Digital Receiver Digital receiver Power adapter for DSC-003 USB 2.0 INPUT 50 Ohm Connections on the rear panel: 7

8 Receiver To INPUT 50 Ohm of the receiver To USB of computer Interconnection cable Extension cable + ODA-4 antenna Extension cable + ODA-4 antenna BNC-BNC cable + BNC-SMA cable The digital receiver USB-SA124B or USB-SA44B should be connected to the computer with the help of the supplied USB cable with the paired USB connectors. The receiver will occupy 2 USB sockets on your computer and the DSC-003 one socket, so in total you need to have 3 free USB ports on your computer. The RECEIVER output of the DS-Line 2 Pro should be connected to the input of the digital receiver with the help of the supplied BNC-BNC coaxial cable and BNC-SMA cable. Connect the ODA-4 antennas to the extension cables and the extension cables to the ANT1 and ANT2 inputs of the DS-Line 2 Pro. Remember which of them is the main (internal) and which is remote (external) for further setup in the software. The DSC-003 is powered from the power adapter (supplied). The probes (infrared, electromagnetic, AC, telephone) should be connected to the front panel of the DS-Line 2 Pro. This can be accomplished before calling the corresponding functions in the software. 4. Drivers after connection for the first time If you have Windows 7 or Windows 8 on your computer (or for some reasons the drivers were not installed during the startup), it is necessary to assign the drivers manually after the connections are made. Firstly you need to Disable Driver Signature Enforcement. In Windows 7 (not necessary in the most of cases): 1. Right Click My Computer, and select Properties. 2. On the Hardware tab, click Driver Signing button. 3. Choose first option: Ignore Install the software anyway and don t ask for my approval. 4. Click OK to close the options Dialog and OK again to close System Properties. In Windows 8: 1. Go to the right bottom corner of the desktop and wait for the side menu to appear. When it's there click on the gear icon with the title "Settings". 8

9 2. Now click on the entry "More PC Settings", click on the entry "General". 3. Scroll down to "Restart now" (under "Advanced start up ") and click it. 4. Wait a bit for a menu. 5. Now click "Troubleshoot", then "Advanced Options" and after that click "Windows Start up Settings". 6. Click on "Restart" and wait for the profit to happen. Open the Device Manager, find the equipment with not installed driver, click the equipment, select Update driver and select the path to the driver manually (C:\Program Files (x86)\digiscan Labs\DigiScan EX\Drivers or the folder to which the software was installed). Click "Install this driver software anyway when the warning message appears and this will install the driver. 5. Startup The Delta system is controlled by the DigiScan EX software. Start the DigiScan EX software and select the language: Then the startup window will appear. It will show the process of establishing the connection with all the components: 3 components should be detected during the startup: the DSC-003 controller, audio device DigiScan Audio and receiver. The software will run in the demo (emulator) mode if the DSC-003 or the receiver has not been found. In this case it is necessary to close the software and check if the drivers were installed correctly. To check the DSC-003 start the Device Manager and make sure the following equipment is present: In the Audio Devices (Audio Inputs-Outputs): DigiScan Audio (in XP may have name USB Audio Device ) In Ports COM/LPT : DigiScan COM If the DSC-003 and the audio device are detected during the startup, but the connection with the receiver is not found (or message Could not spawn data collection process appears) it is necessary to make sure the drivers for the receiver work correctly. Run the own receiver s software (SignalHound) and make sure it starts. In this case close the software and re-start the DigiScan EX. Disconnecting of the receiver from the USB and then connecting again will reset the device and the driver. If for some reasons the DigiScan EX stopped working correctly, reset both the receiver and the DSC-003 by turning it off and then on and then restart the DigiScan EX. 9

10 During the startup make sure that the connection with all 3 devices was established. Then the main window will open automatically. 10

11 6. Brief description of controls The main menu of the main window contains the following items: File operations with the database and files create new, open, save as, import data, etc. Additionally contains printing options and.bmp file export features. View opening of some normally hidden elements of the software: settings of the receiver, sonogram display, sound recording, signal s properties, etc. Sweep main sweeping commands RF background, RF sweep, AC check, TLF check, IR check, MLP check, Detector-Localize Scheduler control on the schedule execution (Run, Stop, Pause, etc.) Tests execution of tests in the manual mode Signals operations with the signals (clipboard commands, sort/group operation, filter, etc.) The toolbar under the main menu contains some settings of the receiver, volume control and repeats some important commands from the main menu, such as: RF background. Is used before RF sweep if only one antenna is available. In this case the sweeping procedure divides into 2 stages. Firstly the antenna is placed in a remote position and the RF background is performed. Then the antenna is returned back to the main in-room position and the RF sweep is carried out with the use of information collected during the first stage. RF background window contains initial settings for this first stage. RF Sweep. Start of the RF sweeping procedure. The RF sweep window will ask operator to enter needed settings for running the procedure. AC 110/220V, IR Range, Electromagn.range, Telef/low volt. line, Audiomodulation operations which normally need connection of a probe to the PROBE socket. Detector-Locate allows the operator to perform location procedure for a suspicious signal or inspect the frequency range, for example Wi-Fi, GSM, etc. The internal space of the main window is shared by the the following windows: Top left corner - Signal-graphical information - graphs displaying information about a signal: Spectrum IQ constellation (visual representation of the signal coming from the analog-to-digital converter of the receiver) Oscilloscope (waveform of the demodulated signal / sound in the room) FFT-spectrum (spectral appearance of the demodulated signal / sound in the room) Top center/right General data graphs displaying information about wide frequency range: Spectrum (or spectrum with sonogram) Detector-Locate (visual/audio indicator of RF level on selected ranges, can be used for location) 11

12 Bottom left Settings general parameters used during the sweep Scheduler list of tasks and groups (execution is performed according to this list) Ranges list of ranges with parameters (attenuator, threshold level, pulse mode, etc) Bottom center/right database: Signals (results of sweeping) Bandscopes (managing arrays of data colleted during the sweeps and displayed in the Spectrum graphs) Right side Sound Recording / Receiver s properties extendable area containing some additional setting of hardware and commands for audio recording/playback in the manual mode Status bar displays information about the current application state and mode, frequency being pointed on the Spectrum/Sonogram graphs. 7. RF sweep RF sweep is the procedure of finding radio transmitting bugging devices (radio microphones, cameras). It is based on the comparison of the radio spectrum inside the room to the spectrum picked up in the remote area. The measurement is performed with the help of two antennas (although it is possible to use one, scanning in turn). Signals with the higher RF level on the internal (main) antenna are supposed to be originating from the inside of the premise, which can mean a bugging device with high probability. If such a signal is found, it is necessary to carefully inspect it in the software after the sweep and perform the location procedure if there is any evidence of danger. The system includes 2 x ODA-4 antennas for 2-antenna sweeping. Please note: both antennas should be used with the extension cables to provide equal wave characteristics. Correct placement of antennas is very important: The main (internal) antenna should be placed inside the checked room, but not too close to the computer on which the DigiScan EX software is running to avoid catching the PC s emissions. The recommended distance is 2 meters or more. The remote antenna should be placed as far as possible from the checked room, preferably outside the window or at least in the window opening. Use all possible length of the cable in order to reach the farthest available premise, put out the antenna through the window (hanging in the cable is OK) or place it on the sill It is obligatory to connect both extension cables to both antennas In case just one antenna is available, the procedure splits into two stages: 1) RF background pickup with the antenna placed far to the checked room (where the remote antenna is supposed to be) 2) RF sweep with the internal placement of antenna (parameter Number of antennas set to 1) Sweep with 1 antenna (RF background) If just one antenna is available, place it correctly in the remote premise and press RF background : In the RF background window select: the rear-panel antenna input to which the antenna is connected (ANT1 or ANT2) Mode of saving the friendly signals: Not Save will mean measurement of the spectrum only (recommended value); Save will cause storage of all met signals in the database with the Friendly mark assigned. This option can be selected if you are on a big distance to the place of pending sweep only. 1-2 kilometers is a sufficient distance which will prevent you from catching the bug s signal and marking it as Friendly 12

13 Frequency range for scanning (Start, Finish) Number of cycles which you wish to repeat the scan. The more cycles you do the more chances to measure intermittent signal. Not all signals are continually present in the air. Part of them has a periodical nature. Such if you repeat more cycles, you catch more temporary signals and such have better chances to get the results Press Execute to start the RF background sweeping procedure. It will be offered to clear the statistical spectrums (MAXs, MINs). Select No if you repeat a number of measurements in a few points around the target room. Such repeated background pickup will improve the preciseness of the further sweep, but the rule for correct placement of the antenna should be followed anyway the antenna should not be too close to the checked room: - if the signals are not saved - at least 20 meters (outdoor preferred) - if the signals are saved 1-2 kilometers The operation can be stopped or paused anytime with the help of the Stop and Pause commands. If it was interrupted, the results (spectrum of each cycle) are stored in the database anyway. After completion of the RF background, return the antenna into the checked room and start the RF Sweep procedure, specifying number of antennas 1. Do not remove the extension cable to provide equal wave characteristics in both measurements. Sweep with 2 antennas If 2 antennas are available, place them considering above recommendations and press RF sweep. You will be asked to specify some parameters: - Usage of antennas: by 2 antennas or by 1 antenna - Assignment of antennas, i.e. which of ANT1 and ANT2 is the main (internal) and which is the remote - Process data after each cycle will mean less preciseness with the faster rendering of results. It is suitable when the fast informing about the danger is needed, for example when the sweep is running during some actions, meetings, negotiations, etc. The spectrum will be processed each time it is measured and new signals will appear in the database. Otherwise, if not checked, the signals will be fetched after all the cycles are done, such you may have less false signals. - Press Next to move to the next page 13

14 - Frequency range (Start, Finish). Setting the entire range is recommended. In some cases, for speeding up the process the frequencies above the 6GHz can be omitted (for the B version covering up to 12.4 GHz). - Repeat mode number of cycles or duration of procedure. The longer the sweep process is, the more chances to catch temporary (intermittent) signals - Save signals with high level on internal antenna only with this option checked you will shorten number of signals in the database and such have less work with later analysis. When selected, the software will use the spectrum of the remote antenna as a threshold; such the strong internal signals will be caught during the sweep only. In fact the extraction of two spectrums is made. - Run sweep now when checked the sweeping process will be started after pressing the Complete button. Otherwise the necessary settings will be made to the task in the Scheduler but the software will stay in the manual mode. The user can make any changes to the sweep task in the Scheduler and start execution later by selecting the Execute command from the Scheduler menu. The automatic mode of the DigiScan EX is executed according to the Schedule. The tasks are executed according to their sequence and repeated a number of times according to the group s settings. If you wish to change the task, double click it in the scheduler window or press the Edit button in the Scheduler s bottom right corner. If you wish to change the repeat number or duration of execution, edit the group to which the task belongs. The group is marked by Folder icon in the Scheduler. The RF sweep command prepares the corresponding task in the scheduler. After the execution starts, the software is in the automatic mode. In this state some operations are not available to the operator (manual setting of frequency, frequency control, check of AC/telephone line, etc.). To perform those operations it is necessary to wait until the software finishes execution and returns to the manual mode. The current mode is displayed in the status bar (lest side). To start the execution of the schedule press the Execute button. Parameters of the Sweep task When executing the RF sweep the software scans the selected frequency range, processes the obtained data and inserts signals to the database. The insertion can be performed according to the settings of task. If you have not started execution in the RF sweep immediately, it is possible to edit the task s settings by double clicking it in the Scheduler. Signal saving parameter contains: Not Save means no signals will be saved in the database during the sweep (just spectrums are stored for subsequent displaying in the Sonogram) During the scan the processing is performed right during the scanning. In this variant the additional tests can be performed to each signal which is not marked as Friendly (correlation) After each cycle the spectrum is processed and new signals are added to DB each time the range is scanned After all cycles the Maximums spectrum is processed after all the cycles are completed, such both constant and temporary signals will be stored in DB The Sweep task contains some other settings affecting the results: 14 - Range (Start, Finish) frequency range - Type of sweep By 1 antenna, By 2 antenna (try to use 2 antennas) - Main and remote antennas (ANT1, ANT2) The Threshold page defines how the signals will be obtained from the spectrum: - For saving signals use Threshold just the threshold will be used for fetching signals Threshold + spectrum threshold and previously stored spectrum will be used (higher value) Threshold + remote antenna the most efficient variant if 2 antennas are used. All the signals with the level lower than

15 on the remote antenna will be omitted. Such the database will contain the signals originating closely to the main (internal) antenna only The Tests page is available when the During the scan variant is selected for the Signal saving option: - 2 nd and 3 rd harmonics the scan process will check if the signal has a threshold exceeding on the multiple frequencies. Such high level may mean the antenna is in a close proximity to the bugging device. Presence of harmonics will add 1 point to the signal s danger level, so you will recognize it in the DB among other signals by watching the danger level or applying the filter - Amplitude correlation the signals will be tested for presence of correlation with the acoustics of the room (the DigiScan EX systems has a built-in microphone for this purpose). Passive means that the system produces no sounds. Semipassive the software will change the volume of playback; such if any audio file is played in the media player there will be changes in the acoustics of room and the correlation test will give better results. Active the software will procude sound impulses during the measurement. Presence of Amplitude correlation adds 1 or 2 points to the signal s danger level, so it can be found in the database. - Active spectrum correlation additional test with measurement of correlation between the audio spectrum of the room and audio spectrum of the demodulated signal. Sound with changing pitch will be produced during the test. Presence of Spectrum correlation adds 1 or 2 points to the signal s danger level, so it can be found in the database. Danger level The signal s danger level is increased in a number of cases: - When its level on the main antenna is noticeably higher than on the remote antenna (Energetic correlation, shown as E field in the database). The increase is 1 or 2 point depending on how much the levels differ. The Sensitivity of detection parameter from the Parameter s window affects the result. - When there are harmonics (1 point) - When the amplitude or spectrum correlation is high (1-2 pints each) In general the signal s danger level may rise to 6 points, but it is suggested that the 2 level is enough for signal to be dangerous and 1 to be suspicious. All the signals with level 1 and higher are subject to obligatory checking by the operator in the manual mode. 8. Manual mode The signals in the database and collected spectrums represent the results of sweeping. The Manua l mode can be used for checking the results of a sweep in the database and in the spectrums (can be represented in the form of a sonogram). Depending on the settings of the sweep task the signals are added to the database during execution, after each cycle or after the last cycle. In the first instance it is necessary to study any signals with a danger level equal to 1 and higher. For comprehensive research, all the signals should be studied and the sonogram should be inspected for the presence of intermittent signals. To tune in the signal double-click it in the database or right in the spectrum/sonogram when in the manual mode. The expandable area in the right part of the main window (Digital Receiver) allows the user to select between Spectrum and Frequency control mode; both are helpful at inspection of a particular signal. Control mode Spectrum 15

16 In this mode the Spectrum graph is refreshed constantly. 50 MHz, 25 MHz, 10MHz, 5 MHz and 2 MHz are the available values for the Span. The wider spans will have slower update rate. Narrower values will update the signal s spectrum faster. Activated Pulse Mode disables the image rejection. As a result the short-time (intermittent) signals can be captured with a better probability. At the same time some spur (image) signals may appear in the spectrum. This mode is good for researching the activity on digital bands in order to find illegal sources: Wi-Fi, GSM, LTE, Bluetooth, 3G, CDMA, DECT, etc. Please note that the Pulse mode is turned on automatically during the Sweep on the ranges which are marked as Pulse in the Ranges window (Settings). Attenuator controls the attenuation in the receiver. The default 0 db value is recommended. There are some ways of changing the tuned frequency: to click on the Spectrum/Sonogram graph directly to click on the Frequency indicator (top left corner of the window) and enter the necessary value to use the arrows buttons near the Frequency indicator To turn on the sonogram in order to inspect the signal s history or to find intermittent signals press the Sonogram icon under the Spectrum graph. The Spectrum graph s area will be split vertically into 2 parts; the upper will be occupied by the sonogram. In the manual mode the sonogram scrolls and adjusts its displayed span automatically to correspond to the selected spectrum. In the automatic mode the sonogram displays the entire sweep range only. Control mode Frequency In this mode the operator can inspect particular signals in order to make conclusion about their origin and potential danger. The demodulation turns on in this mode so it is possible to listen to the signal. Additionally you can turn on the IQ Constellation function to observe the visual representation of the modulation. The corresponding controls are available in the expandable area in the right part of the window (Digital Receiver): - Demodulation selection between FM or AM - Resolution Bandwidth selection between 240, 120, 60, 30 and 15 khz - Sound Filter Bandwidth (VBW) controls the bandwidth of filtering the demodulated audio 16

17 Spectrum Displayed spectrums (click to move to front) Scrollbar Vertical scale (reference level) Span (scale) Move to cursor Move to selection The Spectrum window can display a number of spectrums simultaneously (the selection can be made in the Database Bandscopes). Use the vertical scale (reference level) to increase readability of weak signals Set a convenient Span using the corresponding control Move to cursor or selection by using the corresponding buttons Use the scrollbar to scroll through the different frequencies Click on the name of the bandscope to put it forward In the manual mode click on the spectrum to tune the signal in When the mouse is moved over the spectrum the label in the status bar (bottom of the main window) shows the frequency under the cursor Make a selection with the mouse. A selection in the main spectrum adjusts the frequency boundaries of the auxiliary spectrum ( Signal graphics windows Spectrum ). As such you can inspect separate signals by selecting them in the spectrum. Sonogram Sensitivity Sonogram Threshold Sonogram on/off Filtering out data for threshold The sonogram is the control which can display a number of spectrums simultaneously. The X-axis is the frequency, the Y-axis is the time, and the color of pixel is the RF power. The Sonogram allows the operator to detect intermittent signals, i.e. non-constant signals. Each scanning cycle is displayed by a line where color of each pixel depends on the RF level. High RF levels are displayed by more intensive color, changing from yellow to red. When the sonogram is turned on, the Spectrum window shows 2 extra controls in its left part: 17

18 - The threshold slider (bottom) controls the threshold for the sonogram (lower levels not displayed) - The sensitivity slider (upper) allows the operator to change the intensity of color during the sonogram painting. Such it is possible to see weak signal better Additionally there will be some extra controls for the sonogram: - Selection of antenna (ANT) - Setting the time and date (setting the start time from which the sonogram is displayed) - Setting the scale i.e. 1 or 2 lines per cycle The sonogram can be displayed both in auto and manual mode. In auto mode the Sonogram displays only the data obtained during the current sweeping session and in the entire frequency range, in which the sweeping is performed. In manual mode the operator can select the date, time and antenna. Additionally the sonogram s frequency range is connected to the spectrum s frequency range; therefore the operator can see the signals in the sonogram just above the corresponding peaks in the spectrum. Below are samples of a sonogram for some intermittent signals Intermittent signal at 274 MHz existing between and 16.19: The green spectrum below is the current spectrum, obtained during the last scan cycle. There was no signal 274 MHz at that moment. The red is the Max for the spectrum; it shows the 274 MHz signal existing periodically. Such intermittent signals may not exist in the current spectrum but nevertheless will be stored in the Max, if they were active, even for a short period of time, when the sweeping was performed. The sonogram in the upper part shows the time when the signal was active. The GSM 1800 frequency range contains very short signals, which is typical for such kind of transmissions: The dots in the sonogram show very quick transmissions caught during sweeping. The maximums (red spectrum in the bottom part) confirm that the signals existed and show their RF level. 18

19 The Wi-Fi frequency range ( MHz) contains multiple signals, appearing on different frequencies at different times: The maximums of the spectrum show the result of measurements conducted during 90 seconds. The sonogram displays the activities by dots. The sonogram can show the data collected during the sweep and in the Detector-Locate mode (please see the next section). For inspection of a separate frequency range (GSM1800 as an example), the Detector-Locate mode is preferrable. Use the Threshold slider to cut off the background. The sensitivity adjustment allows the operator to see a relatively weak signal better, with a higher contrast. The above samples were taken with the threshold set to 0 (so the background is shown in light-blue) and the sensitivity set to high level, so the dots can be seen clearly. Detector-Locate The Detector-Locate function allows the operator to inspect how the RF level of a particular signal/frequency range changes depending on the position of the antenna in the room. If the bugging device or a suspicious source is situated inside the premise, it is possible to locate it by finding the area with the strongest level. When the Detector-Locate function is activated, the software continuously scans the entered signals and ranges, displays the maximal level on each signal/range on the bargraphs and starts producing sound clicking impulses if the threshold level is exceeded. The higher RF level is the more intensive impulses are produced. Such the operator can conduct location without necessity to watch the computer s monitor, just referring to the sound. It is possible to enter any signal from the database into the Detector-Locate. It is also possible to enter any impulse range and such to conduct detection of GSM, CDMA, 3G, DECT, WI-Fi, Wi-Max, LTE, Bluetooth, etc. Please note that some impulse ranges occupy quite a wide span, so the software will need more time to re-scan and such making it difficult to pick up intermittent signals. Therefore it is not recommended to start Detector-Locate with a big number of impulse ranges (or signals) simultaneously. 1, 2 or 3 channels is the best choice. In addition to location, the Detector-Locate allows the operator to work in the monitor mode, observing the previously measured suspicious intermittent signals or ranges and to have quick notification about the RF transmission session being started. This could be useful when the increased security of the premise is needed (negotiations, meetings, etc.). 19

20 Delete channel Pulse on/off General threshold The Detector-Locate contains the following controls: - Add all impulse ranges adds all the impulse ranges existing in the Ranges window - Add impulse range adds a separate impulse range - Add current signal in DB adds currently selected signal in the database - Add selected range adds the range which is selected in the window Signal graphical information Spectrum (use right mouse button in the main spectrum window to make selection) - Remove all deletes all the channels - Turn on turns on and off the update of the channels The channels appear inside the Detector-Locate have the following controls: - Name label - Frequency range label - Delete command (deletes the channel) - Pulse on/off (turns on and off the pulse mode for the channel) - Level in db (will be red when the threshold is exceeded) - Level bargraph and threshold slider Below the channels there is a General Level indicator and the general threshold slider. When the highest among all channels level exceeds this threshold, the program starts producing sound impulses and their intensity grows when the RF level increases. Set such a threshold level that only the strong signals produce the sound. The Detector-Locate stores the obtained spectrums in the database when it is active, so the Sonogram graph can be used for viewing the results both during the operation and after its completion. Digital (pulse) transmissions GSM, Wi-Fi, 3G, LTE, DECT, etc. The probability of detection of non-constant digital transmission increases in the Pulse mode, therefore after each cycle of scanning performed not in Pulse mode, the Sweep task re-scans the pulse ranges with the Pulse mode on. For example, if the sweeping covers the MHz range, it will firstly scan this range with the Pulse mode off, and then re-scan the range MHz with the Pulse mode on (GSM uplink band). The ranges can be created and marked as Pulse in the Ranges window. Initially it contains the default ranges, created automatically for Europe, but it is possible to change them to set other frequencies or create new spans, for example the new LTE standard. When setting the new ranges take into consideration that the uplink part of the band is interesting for analysis, i.e. the signals sent from a telephone to base stations. The more cycles which are performed in the Sweep task, the higher the probability of detection of a digital transmission is. In addition to the Sweeping procedure the digital (pulse) ranges can be inspected later, using the Detector-Locate function.the Sonogram and bandscope of maximums can be used for viewing the results. Do not forget to clear the Maximums before starting, as it may contain data obtained during previous operations. The GSM and Wi-Fi signals will be captured by the Delta systems as very short transmissions, so the Sonogram will show dots. The modern urban/office environment contains a number of active pulse sources, such as Wi-Fi access points, working GSM/3G/LTE mobiles, etc. To make the conclusion that a measured signal originates from the checked premises it is necessary to analyze its level and compare it with the levels received by the remote antenna. Extremely high levels, for example -10dBm or - 20dBm may originate from the local sources. The threshold of the sonogram can be used for filtering out only strong signals. To trace the illegal Wi-Fi signals it is possible to deactivate the local legal access points and to perform Detector-Locate procedure again (for the Wi-Fi range). 20

21 When inspecting the GSM and other mobile communication protocols take into consideration that the terminal (telephone or illegal bug) transmits when it hears sound, so the signal can be captured at that moment only. Create sound noise in the checked premises (music, course of foreign language, etc.) Use the new MWA-6 and MWA-12 (12G only) antennas for finding the direction to the digital source. IQ constellation The IQ constellation function can be used in the control mode Frequency. This graph displays the data coming from the receiver before the demodulation in the I-Q coordinates and can be used for a visual inspection of a signal for the presence of modulation. Some signals can have typical form in the IQ (above picture shows the FMmodulated signal). Controls in the bottom: - Turn on/off - Lines way of drawing (lines or points) - The scale (adjust to fit the window) - Quantity of points (number of samples to be displayed) - Filter (decimation function allows the operator to adjust the filtering and decrease the bandwidth) 9. AC 110/220V This function is used for checking the AC and other high voltage wires for presence of illegal signals. Passing signals via wires is considered to be more reliable method of bugging among professionals, since this method does not use relatively easily detectable RF waves. Such a bugging device picks up the sound in the room and transmits it through the wires using the very low or low frequency range (usually between MHz). Then, outside the room, the signal is picked up from the wire by the special receiver or re-translator. The DigiScan EX system has a built-in VLF convertor and is supplied with the AC-Line probe. It allows the operator to detect presence of modulation on the AC wires. Firstly, remove all channels from the Detector-Locate. To start the AC 110/220V click the corresponding button. You will be offered to connect the probe between the DigiScan EX control module (convertor) and the AC outlet. After pressing OK the system will enter the Detect-Locate mode with the corresponding input selected (AC 110/220V) and low-frequency range entered. In this mode all the RF levels higher than the threshold will be indicated by the clicking sound. Connect the AC probe to different outlets in order to check all phases present in the premise. On the left side of the window you will be observing the spectrum in the low-frequency range (i.e. 0-6 MHz). So, if in any of the outlets there is a signal on the wire, you will hear the sound impulses and see the signal in the spectrum. In this case the detected signal is subject to additional inspection in the manual mode (demodulation). Press Stop, select the AC 110/220V input manually and tune in the signal which appeared in the spectrum. Select the control mode Frequency to demodulate and listen to the signal. Change the demodulation mode between AM and FM, change the RBW and precisely adjust the frequency to find the best variant to demodulate sound if it is present. By listening to the sound try to recognize whether it originates from the checked premise. Please note: - the sound impulses in the Detector-Localize start when the threshold is exceeded, so if there are strong interference signals on the AC wires, they may cause sound signaling. In this case it is recommended to increase the threshold level. - The built in VLF convertor creates own zero signal on frequency displayed as 0 Hz. High level on this frequency is not a danger - Since the checked frequencies coincide with some long-wave and middle-wave broadcasting ranges, and due to some specific characteristics of the receiver being used, you may hear demodulated broadcasting sounds even on frequencies 21

22 which have not or have very low RF level. For you the high RF level plus demodulation of in-room sound should be a sign of danger. Similarly to the RF Sweep, there should be sound in the checked room, so that the potential bugging device is activated (some bugs do not transmit during the silence). Use the extension cable (supplied) for the probe to check the remote outlets. 10. Telef/Low volt.line Similarly to the AC wires the telephone wires (and Ethernet) can transmit the signals from the room. This can be done both in the audio range ( Hz) and VLF-LF ranges (20 KHz 3000 khz and higher). Checking the VLF-LF frequency range is performed similarly to the AC 110/220V, but the TEL/LOW VOLTAGE input has to be selected and the corresponding cable should be used. Connect via the supplied splitter if necessary. 11. Audiomodulation This procedure can be performed in conjunction with checking the telephone/ethernet line. It allows the operator to listen to the sound on the wire in the audio range and such to detect the presence of audio modulation. 12. IR Range Infrared beams can be used to transmit the sound from the room secretly. IR Range allows the operator to scan the IR range using the IR-Line probe and such to find the bugging devices using this method. It is necessary to take into consideration that the IR beams distribute along the line of sight, so the potential bugging device will be directed to the place from which reception is possible, i.e. the beams will go through the window most probably. Therefore it is important to check the area near the window with the probe directed to the internal space of the room at a number of angles. Each window area should be tested. It is also necessary to remember that the IR transmitter can be placed outside, so where possible put the probe outside the window with direction to the room and walls. Similarly to the AC 110/220V, the operation will be performed in the Detector-Locate mode, so any signal appearing in the spectrum will be additionally signaled by the clicking sound. The intensity will increase for the higher RF levels, so the location is carried out by finding the direction/place with the maximal level. The Detector-Locate mode can be stopped for manual tuning into the signal and listening to it in order to find signs of modulation (sound from the room). Select the IR(INFRARED) input. To demodulate enter into the Frequency control mode in the Digital Receiver s properties. Change FM/AM and RBW. Precisely adjust the frequency while listening. 13. Electromagn.range The supplied MLP-Line probe is sensitive to the side emissions going from different electronic devices, such as hidden cameras, power adapters, computers, etc. The Electromagn.range procedure allows the operator to find these emissions and such to detect presence of not desired electronics. Using the extension cable you can check all the areas in the room, for example: ceiling, walls, objects like souvenirs, furniture, outlets, plants, etc. In case the signal is found (clicking sound, high RF level), It is necessary to research the physical location and establish whether the source is friendly or not. 22

23 14. Microwave (MW) frequency range It is recommended to check frequencies above 3000 MHz using the Microwave mode (instead of Sweep ) and to use the microwave antennas MWA-6 or MWA-12. Please note that the MWA-12 is supplied in the standard set for the 12G version only. The standard omnidirectional antennas are not so sensitive to microwave sources. Additionally, the RF extension cables significantly decrease sensitivity on higher frequencies. Therefore the Microwave procedure is performed with the MWA-6/MWA-12 antennas connected directly to the receiver to improve sensitivity. The microwave antennas can also be used during a standard Sweep procedure to improve the sensitivity to such modern digital sources such as Wi-Fi, etc. In the case of usage in Sweep mode, the measurement can be repeated a number of times to find the direction with the strongest signal and therefore location can be carried out. Below is the table of suitability for the different types of transmission: Type of transmission MWA-6 MWA-12 Lower LTE ( MHz) OK CDMA 850 MHz OK GSM 800/900 MHz OK GSM/LTE 1800/1900 MHz OK Video Transmitter 1200 MHz OK 3G, 4G in the range up to 2000 MHz (3G OK 2100MHz has uplink actually under 2000MHz) Wi-Fi 2.4 GHz OK OK Wi-Fi 5GHz OK OK Bluetooth 2.4GHz OK OK Video camera 2.4GHz/5GHz OK OK 4G (LTE on upper ranges, Wi-Max) OK OK Bugging device MHz OK Bugging device MHz OK OK Bugging device MHz OK Pressing the Microwave button allows the operator to start the checking procedure. In the Microwave check window it is necessary to select the part of the microwave range to be inspected (for 4G version it is not necessary to make any selection): Disconnect the cable from the socket on the front panel of the receiver and connect the microwave antenna. After pressing OK the Detector-Locate window will open showing a constantly changing level. Set the threshold just above the background level using the slider above the General level. Direct the microwave antenna to different parts of the room while observing the level and listening to the sound (adjust the sound volume if necessary). An increased level will produce clicking impulses. Do not move the antenna too quickly as the spectrum is upgraded quite slowly, each seconds. By going to the Spectrum page you will be able to observe the entire spectrum of the microwave band in low resolution. This means you will have the additional information about what frequency is active and how the level is changing depending on the antenna position. If you observe an increased level, try to make a decision as to whether it is a signal or just a slight change of the background level. Re-adjust the threshold level if necessary. 23

24 If a signal is detected: Find the direction with the strongest level by rotating the microwave antenna The procedure can be repeated by moving the system to another location. Therefore the position of a source can be obtained more precisely The Detector-Locate can be stopped. Then you can tune in the signal by setting the marker onto it. In this case the spectrum will update in a high resolution within a span of up to 50 MHz. The antenna can still be rotated in order to find the highest level The MWA-6 and MWA-12 antennas rear side has the lowest sensitivity, it can help in locating: when the signal has the weakest level, the antenna is positioned by its back side to the signal; Repeat the Microwave checking procedure for another frequency range (for 12G version only). After completion press Stop and do not forget to reconnect the cable going from the DS-LINE 2 Pro convertor to the receiver The microwave antennas can be used not only in the Microwave mode but also in the Sweep (with 1 antenna) and Detector- Locate mode. They are particularly recommended when a separate pulse band is being inspected (GSM, Wi-Fi, etc) in the Detector-Locate mode. Do not use the microwave antennas on frequencies out of their ranges Do not use the microwave antennas for 2-antenna sweep All RF cables attenuate microwave signals significantly. Therefore the cable attached to the microwave antenna is short. 15. Parameters The Parameters window contains some important options. Page Equipment : - Shows the detected hardware (in case the connection failed, the Emulator will be displayed) - Antenna inputs Page Sweep : 24 - Autothreshold recommended value ON, but if necessary can be turned off. In this case the red line will be displayed in the spectrum windows. During the sweep all the signals exceeding the threshold are stored in the database. When the autothreshold is selected the comparison is performed with the automatically calculated threshold. Levels for the manual threshold are stored in the Ranges window. It is possible to adjust the threshold levels there or right in the spectrum window with the help of the mouse. The Ranges window contains the controls for adding and deleting the sectors of the threshold. - Signal detection sensitivity how sensitive the program will be to the signals found in the spectrum. High may result in insertion of more signals into the database. Low allows simplifying the analysis after the sweep so fewer signals will be stored. Medium is the optimal value. - Danger threshold the level from which the signal is suggested to be dangerous. Dangerous signals are marked by red color in the database - Mark dangerous signals for printing all detected dangerous signal will have the Print mark checked

25 - Notify when dangerous signal detected the program will stop the sweeping process and wait for confirmation of the operator - Alert sound additionally the program will produce the sound at detection of danger Page Sound : - Automatic gain control the software will adjust the input audio gain to achieve the best volume and sensitivity - Additionally extra sound settings, allowing the software to correctly capture and playback sound: Under Windows 2000, XP and 2003: Playback: Device - a device which is used for a playback Set of controls - set of the soundcard mixer s controls which are used during a playback. Each type of soundcard has its own names for these controls. Play, Volume, Playback volume or another variant connected with the playback term should be chosen. Recording or Input selector cannot be used. General Volume - usually it is General volume or Volume Wave - Sound or any other control regulating playback volume Recording: Device - a device which is used for a recording Set of controls - Set of the soundcard mixer s controls which are used during recording. Recording or Input selector should be used.. Input mixer/multiplexer - Input selector, Selector or MUX Under Windows Vista / Windows 7: Rendering (playback) device - the sound device which will playback demodulated sound (Speakers or Headphones) Capturing (recording) device DigiScan Audio should be there if all the drivers were installed OK. Cannot be changed. - Volume: levels for the correlation tests Page Recording : 25

26 - Path folder to which sound files are stored - Use (megabytes) on disk limit to disk usage - Duration of recording at sweep and analysis duration of sound file when the recording is performed in auto mode - Perform compression compress sound to decrease occupied disk space - Algorithm of compression VLF-range: - Convertor DS-LINE 2 PRO should be here - Converter s frequency leave the default value 12 MHz if the hardware does not contain any special label/sticker - Range of scan default value 0-6MHz, but can be increased to 11 MHz - Check connection allows the operator to check the connection with the hardware. The front panel of the device should be showing the changing inputs - Inputs the operator can set which inputs are used or not. By default all the input are selected - Interface color for signal s highlighting, color of spectrum s background 26

27 16. Settings - Scheduler A schedule is a list of tasks and groups which is executed in automatic mode. A group contains a number of tasks. It is possible to create any number of groups and tasks and they can be executed any given number of times or started at a specific time. Groups in a schedule can be executed in a direct order or randomly with activation performed by the watchdog timer. When the RF Sweep mode is started, it creates a Sweep task in the scheduler. Schedules are stored in the SCHEDULE folder. Use Edit button in the bottom right corner to enter and leave the edit mode. Any changes are saved in the file when leaving the edit mode. Some commands become available in the edit mode: - Add addition of a group/task. Tasks are added to the end of the currently selected group. The groups are added to the end of the schedule. The Sweep task is described in this chapter only. - File commands: New Schedule, Save As (Saving the schedule under another name. Please note that the current file is saved automatically when leaving the edit mode), Load (adding the content of another schedule to the currently opened schedule), Open (opening another schedule). - Movement of a task within the group or a group within the schedule - Erases an object from the schedule. The last group and last task in this group cannot be erased. - Default - resets the current object s parameters to default A group has the following parameters: 27 - Disabled. Use this parameter to exclude a group temporarily from the execution of the auto mode - Execute. By cycles - a group will be executed a given number of times; By time - a group will be executed at given time; - Start execution at. This setting allows the group s performance to be initiated by the watchdog timer. Before turning on the timer set the start time of each group

28 The Sweep task has the following parameters: Parameters page: - Disabled. Excluding the task from the execution in the automatic mode - Antenna. The main antenna situating inside the checked room should be specified here - Tests. Execution of the tests for each found signal during the sweep (available if the Signal Saving parameter is During the sweep only). Tests allows the operator to increase reliability of the sweep by increasing the Danger level for suspicious signals, but give results for AM/FM modulation only and will decrease the general sweeping speed. - Sound recording. If the signal s danger level exceeds the danger threshold, the software will record sound when this parameter is checked. The Sound recording tab sheet will appear showing some extra parameters. - Range, MHz. Frequency range for the Sweep - Type of sweep. Number of antennas to be used during the sweep. 2 is recommended if the antennas are available - Remote antenna. The second antenna to be used during the sweep. Specify here the antenna which is placed remotely, as far from the checked room as possible - Save signals: Not Save sweeping without saving signals (just the spectrums will be stored); During the Sweep the threshold exceeding will be looked for at the each sweeping step, in case of presence the signal gets to the database immediately; After each cycle the threshold exceeding is checked after completion of each sweeping cycle, so the signals will be added by a packs Threshold page: - For saving signals use: Threshold just the threshold will be used for comparison at extraction of signals from the spectrum; Threshold+Spectrum the previously scanned spectrum can be combined with the threshold, so they are used together for detection of the new signals in the spectrum; Threshold+Remote antenna the threshold data and the spectrum on the remote antenna will be combined and used together, so more powerful in comparison to the remote antenna signals will be added to the database only (locally originating signals only). Tests page: 28

29 - 2nd and 3rd harmonics. Enables the Harmonics Presence Test. Bugging devices might radiate harmonic components as well as the central frequency. Usually these undesired signals are divisible by the signal's central frequency. For example, if a bugging device s frequency is 600 MHz, it may have harmonics on 1200 MHz and 1800 MHz. In this test the program scans two ranges. One corresponds to the signal s bandwidth multiplied by 2, another - to the signal s bandwidth multiplied by 3. Results are shown by two symbols in the protocol and the Harm field of the database. Symbol 2 means the presence of a 2 nd harmonic, 3 means a 3 rd harmonic and - means the absence of a signal. The DigiScan EX increases the signal s Danger Level by 1 if both 2 nd and 3 rd harmonics are present. - Also in AM. The correlations will be performed, not only in the FM and WFM modulation modes but also in the АМ. PLEASE NOTE THAT THE CORRELATION TESTS ARE EFFICIENT FOR AM/FM MODULATED BUGS ONLY AND THE PROCEDURE SLOWS DOWN THE SWEEPING PROCESS. - Amplitude Correlation (A). The correlation is a mathematical value which reflects the similarity of two values. When measuring correlation the software compares the demodulated signal and the sound present in the room. If there is a bugging device in the room and a currently tested signal is its transmission, these values will be similar and the correlation will be close to 1. If a currently tested signal does not originate from a bug, the correlation will be low and close to 0. The signal s Danger Level increases by 1 if the absolute value of the A is more than 0.33 and by 2 if more than The measurement is performed in the WFM modulation, then NFM and AM (if enabled). Results are saved in the database - in the signal s event list and the maximum value in the A field. The software tries to detect a signal s modulation using the results of the correlation. If the values of A and S (Spectral) are high enough (>0.33), the software assigns the signal to the modulation mode in which the total correlation is higher. Otherwise the modulation is assigned depending on the signal s bandwidth. These are the following types of amplitude correlation: o Passive - during its execution the PC s speakers produce no special sounds. This prevents unwanted detection of the sweeping procedure. Sounds should be present in the room to make the correlation measurement successful as well as to activate potential bugging devices with voice activation. These can be people s conversations, music or, for example, a recording of a language learning course. Since the Passive Amplitude Correlation success depends on the presence of sound in the room it is recommended to set a longer duration 5-10 seconds. o Semi-Passive (with sound change). This test is similar to the Passive except that during execution the program periodically changes the volume of the sound from the lowest to the maximum. WMA/MP3/WAV files can be played back during the sweep, such there will be changing sound in the room (which is good for the correlation). o Active. Maximum speed and reliability is reached. The computer s speakers will produce sound impulses. - Duration of active correlation - Active Spectrum Correlation (S). During Active Spectrum Correlation execution the computer s speakers produce tone signals with a changing pitch. At the same time a comparison of the sound s spectrum from the receiver's sound output and the spectrum of the sound present in the room is performed. The duration of the measurement is about 4 seconds. The measurement is performed in the WFM modulation, then NFM and AM (if enabled). Results are saved in the database - all the measurements in the signal s event list and the maximum value in field S. Result is saved in the database - in the signal s event list and in the S field. Sound Recording page: - Do not record if repeated - avoiding repeated recording when the signal is detected a number of times; - Repeated recording interval - the length of time between repeated recordings; - Pass pauses (voice activation) - avoiding the recording of silence or quiet noises. - Level (%) defines the minimal level needed to start recording. - Interval of silence defines the period required for the recording to turn off. - Write to separate files forces the program to create a new file each time the recording is turned on by the appearance of a sound. Normally it creates only one file. 29

30 17. Settings - Ranges The Ranges window contains the list of frequency ranges with their settings: - attenuator state (set if you wish to decrease sensitivity for certain range). The receiver will set its attenuator automatically according to this value - threshold level (used during the sweep when the Autothreshold setting is off) - name of the section - Fixed protection of edges against changes (recommended for pulse ranges, such as GSM900 ) - Pulse pulse mode for the receiver. Recommended for digital communication bands, like GSM, 3G, CDMA, Wi-Fi, Wi- Max, LTE, Bluetooth, DECT, etc. Pulse mode suits better for digital transmissions but has a disadvantage connected with image signals, i.e. during the sweep the spectrum may show some false signals, which actually do not exist. The threshold level for each section can also be edited directly in the spectrum windows with the help of the mouse. The Ranges window will contain some default pulse ranges. If your country uses another standards or frequencies, it is necessary to edit the list and change the data. Use Add or Delete commands. Since all the sections should go one by one without gaps, the Add splits the currently selected section into 2 halves. Before adding or editing, switch of the Fixed to allow editing the current section. The upper toolbar contains standard file commands New, Open, Save As. When the Ranges window leaves the edit mode, the data is stored automatically in the current file. 18. Database The database contains the results of sweeping signals and bandscopes. 30

31 Signals To select multiple signals, hold the Ctrl key pressed Navigation buttons used for browsing between the records - Quick filter filtering out different types of signals - "All", "New" (added after the program s start), "Dangerous" (danger level above the threshold), "Friendly", "Non-friendly" and "Filter" (launching the filter box to specify more precise criteria for signal selection) - Filter - launching the filter window to set signals selection criteria: o By first detection date selection of signals by their first detection date. Two calendar controls from and to become visible when it is checked. Use the Period button to set a standard span of time last day, week or month. o By frequency - allows the selection of signals by frequency. Two controls from and to become visible when it is checked. o By danger level - allows the selection of signals by their Danger Level. Two controls from and to become visible when it is checked. o Friendly - determines how friendly signals are handled. Non-friendly signals will be selected when Non-friendly is chosen, friendly when Friendly and no selection will be performed when All. o Protected - determines how protected signals are handled. Non-protected signals will be selected when Nonprotected is chosen, protected when Protected and no selection will be performed when All. o By bank allows the selection of signals by bank. All existing in the database banks will be listed in the checkbox list after checking By bank box. Use Clear to clear the selection and Select All to select all the banks. - Sort - Sorting signals by the current field - Properties show/hide the signal s properties Fields: - Frequency in MHz - Mod modulation type - BW signal bandwidth in khz - "F", "P", "Pr" signal attributes "Friendly", "Protected", "Print" in the form of icons ( ) - E energy correlation level (0/1) - Hrm result of the harmonic presence test - A amplitude correlation test results (-1 1) - S "spectral correlation" test results (-1 1) - Dl overall danger level, calculated based on the energy correlation and the tests performed (0 6) - Bank the name of bank to which the signal belongs. The banks can be used for signal filtering - MA the signal level at the main antenna - RA the signal level at the remote antenna The menu "Signal / Visibility of fields" menu command allows the operator to see some extra fields: - Date / Time of detection date and time of the signal's entry into the database - Comment text comment assigned by the user The signal s properties can be opened by the corresponding command on the toolbar: - F1, MHz - F2, MHz The span, occupied by the signal - Assign to... assigning the bandwidth specific for a modulation type - Events - list of events connected with the signals: Date / time date and time of the event, Frequency frequency of the signal, Lvl level of the signal at the main antenna, Mod modulation, Parameter name of the extra measured parameter("bw" signal bandwidth, etc.), Result measurement result, Dl danger level, Comment additional information, Delete / Delete All - deleting a single event or the entire list

32 - Apply - saving changes in the properties (when scrolling to a new signal, the changes are saved automatically) - Cancel - cancels changes in the current signal Bandscopes A bandscope contains data obtained during the sweeping. - Bandscope. Name of the bandscope. Some standard bandscopes are created automatically and cannot be deleted. It is possible to add any quantity of custom bandscopes. It is necessary to consider the memory capacity when creating extra objects. For each bandscope, it is possible to create subordinated statistical bandscopes. Data in statistical bandscopes are updated not directly but when updating the main bandscope. Max is the maximum bandscope, Min minimum bandscope, and Avr the averaged bandscope. Information is collected in statistical bandscopes during multiple sweeps. - Show. Turing on/off the drawing in the spectrum windows - Color of drawing - Fill mode - Resolution of the bandscope - Comments On the toolbar there are the following commands: - Navigation buttons - Create bandscope creates custom bandscope. The linked statistical bandscopes can be created simultaneously - Create a copy copies the currently selected bandscope. Can be used for storing the data containing in the bandscope after the sweeping. The copy can be later used as a threshold or for visual analysis - Delete bandscope deletes the bandscope - Bandscope's properties changing the properties name, statistical bandscopes - Clear bandscope or selection clears the entire bandscope or selection if it is made in the spectrum window - Export bandscope export of data to the file - Import bandscope import of data from the file 19. Sound recording This window records demodulated signals. Each sound file is linked to the signal in the database. 32

33 - Record. Activates recording - Pause - Stop - Playback. Start playback in the standard media player associated with the.wav file. Before playback, turn off listening to the currently selected frequency by selecting Control Mode: Spectrum. - Pass pauses (voice activation). This feature allows you to not record silence or quiet sounds. "Level(%)" sets the level of record activation, "Interval of silence" the time it takes to stop recording, and "Write to separate files" will set recording of each activation in a separate sound file. - Recognize the DTMF. Includes the option of recognizing touchtone. Recognition results are stored in the respective field of the sound files database. Note: Using this function causes increased CPU load, so you should use it only when necessary. - Select by database signal. Makes it possible to select audio files obtained for the signal that is currently selected in the database - Delete - Deletes the sound file - Select all - Selects all the sound files - Sort by selected - Sort by the current sound files database field - Export selected sound files - Exports the selected sound files into the specified folder - Status bar - Displays the number and total size of sound files. Database fields: - Date date of recording the file - Time time of recording the file - Frequency frequency at which the sound file was recorded - Mod modulation at which the sound file was recorded - Duration duration of the sound file - DTMF DTMF tone recognized when recording the file 33

34 20. Usage with the wide-band receivers The DigiScan EX software is compatible with the wide band receivers, such as AOR AR8200, SR2200, AR8600, ICOM IC- R1500/2500, IC-R20. Although these receivers do not provide such a high speed of sweeping as the digital receiver used in the Delta system, they also can be used for sweeping. In addition, wide-band receivers suit well for some specific tasks such as the radio monitoring (scanning frequency ranges or channels with registering activities). Connection For all types of receivers, the DS-Line 2 Pro should be connected with the DSC-003 by the supplied interconnection cable. IC-R1500/R2500 ODA-4 with extension cable ODA-4 with extension cable Coax cable (supplied) Interconnection cable USB USB Cable DS-L-SND (supplied) ANT IC-R1500/2500 rear panel DC IN USB EXT SP Power adapter for DSC-003 Receiver s power adapter The ICOM IC-R1500/2500 (PCR1500/2500) is the fastest scanning receiver; therefore it can be used both for sweeping and monitoring tasks. In addition, high-quality RF isolation of this model gives good results in 2-antenna analysis, used in the system during the sweep. The IC-R1500/2500 is connected via the USB cable directly to the computer. Use the cable which is supplied with the receiver. Before using with the DigiScan EX software you should perform the following steps: 1. Install the IC-R1500/2500 driver (should be requested after connection to the computer). The driver is on the receiver s CD or on the supplied USB flash drive 2. In the Device Manager turn off the audio device, created by the IC-R1500. To distinguish between it and the audio device created by the DSC-003 controller (they might have the same name), turn off the DSC-003 temporarily, then turn off the device which is staying. Then again turn on the DSC The IC-R1500/2500 also creates a COM-port in the system (seen in the Device Manager in the COM ports section). To provide correct detection of the receiver it is necessary to set the port s number below 10, for example COM3 or COM5. Open the port s properties press Advanced and set number below 10 if initially it was assigned a higher value. In addition to USB connection, the EXT SP socket of the IC-R1500/2500 should be connected to the RECEIVER socket with the help of the DS-L-SND cable (supplied). RECEIVER output of the DS-Line 2 Pro should be connected to ANT input of the IC- R1500/2500. The DigiScan EX software, when started, should confirm detection of 3 devices: DSC-003, DigiScan Audio and IC-R1500. If the IC- R1500 is not found, there might be problems with the driver or the COM number is not set properly. Try to use the own ICOM software to check the driver. 34

35 AOR AR8200 Not so fast and not so good RF isolated, but affordable and with good frequency coverage, this model can be used for radio monitoring and 1-antenna sweep. USB Antenna Coax cable (supplied) Interconnection cable Power adapter for DSC-003 Cable DS-L-AR8200 (supplied) The power adapter for DSC-003 has a second socket for powering the AR8200. In addition the system is supplied with the DS-L- AR8200 cable, which will pass the control commands and the sound simultaneously. The connection is between the receiver and the DSC-003, which is different to ICOM IC-R1500/2500, which is connected to USB of the computer. The software after start should confirm detection of 3 devices: DSC-003, DigiScan Audio and AR8200. AOR AR8600/SR2200 These models of receivers have the RS232 interface, therefore they should be connected with the help of the separately supplied cable DS-L-RS232 to the RS232 socket of the DSC

36 ODA-4 with extension cable ODA-4 with extension cable Coax cable (supplied) Interconnection cable USB Cable DS-L-SND (supplied) ANT DC IN AR8600 or SR2200 RS232 (REMOTE) (REMOTE) EXT SP Power adapter for DSC-003 Receiver s power adapter DS-L-RS232 cable (supplied separately) The sound should be taken from the EXT.SP socket and connected to the RECIVER socket of the DSC-003 with the help of the supplied DS-L-SND cable. The software after start should confirm detection of 3 devices: DSC-003, DigiScan Audio and AR8200 (SR2200). IC-R20 The ICOM IC-R20 is connected similarly to the AR8200, but with the help of the DS-L-ICR20 cable (supplied separately). Connect the cable to the CI-V socket on the right side of the receiver. Settings of the IC-R20: - Set the SQUELCH into the OPEN position (click SQL and rotate the handle DIAL-R) - Set the desired attenuator mode (change from PC is not supported) - Set audio volume to 20% - In the configuration menu set the Exchange rate (BPS) to 9600 and CI-V address between 6C... FF (refer to the receiver s manual if necessary) If the IC-R20 is not detected during startup, open the Parameters window and set the same CI-V address as was specified in the receiver s configuration menu. Radio monitoring, Scan Range task The DigiScan EX software contains some tools for radio monitoring. The Scheduler allows the operator to add and execute in automatic mode 3 special tasks: Scan Range, Scan DB and Frequency Watch. The Scan Range task scans a frequency range with a user-defined step and modulation. It was created since the Sweep task does not allow these parameters to be changed. The Scan Range task s aim is to register activity of signals and perform sound recording of these states. The task does not perform tests but has flexible conditions of scan continuation. 36

37 Disabled - disables the task Antenna input Sound Recording - turns on recording of sound from active signals. The Sound recording tab sheet appears when this option is selected Range, MHz, Modulation, Step - scan parameters. Depending on the selected modulation and step available bandscopes will appear in the Bandscope dropdown list Bandscope - this list allows the user to select a bandscope to be built during the scan. Select Do not build if it is not necessary. The list will contain only those bandscopes which correspond to the selected step and modulation from the current database Create - this button allows the user to create a new bandscope in the database directly from the scheduler and use link it to the Scan Range task Recognition algorithm. When turned on, the algorithm will combine the exceedings of the threshold by peaks. For example if the scan step is 10 khz and the signal s bandwidth is 50 khz, under normal condition the Scan Range task will add 5 signals to the database, although actually there is one. The algorithm will combine these 5 signals into 1. Continue. This parameter allows the user to set conditions of suspending and resuming the scan. Please see the Picture. o Timeout then first off - when an active signal appears (level exceeds threshold) the scan process goes into a suspended state and stays in it during the timeout independently of the activity. After the timeout is completed the suspended process lasts until the activity disappears for the first time then the scan is resumed. Recording of sound is performed in the suspended state if the corresponding parameter is set. o Off during timeout - when an active signal appears (level exceeds threshold) the scan process goes into a suspended state and stays in it until an inactivity with a duration longer than the Timeout appears. If the inactivity is shorter than the Timeout, the suspended state is continued. Recording of sound is performed in the suspended state if the corresponding parameter is set. o Timeout or off - when an active signal appears (level exceeds threshold) the scan process goes into a suspended state and stays in it until the signal becomes inactive or the timeout elapses (by the first event). Recording of sound is performed in the suspended state if the corresponding parameter is set. o Timeout - an active signal appears (level exceeds threshold) the scan process goes into a suspended state and stays in it during the timeout independently of the signal s activity, then the software returns to scanning. Recording of sound is performed in the suspended state if the corresponding parameter is set. o Do not stop the scan process is not suspended when an active signal is found. Use this option if you only need to store signals into the database. 37

38 Level Threshold Signal Time Timeout then first off Level Timeout STOP Threshold Off during timeout Signal Time Level Timeout STOP Threshold Timeout or off Signal Time Timeout STOP STOP Level Threshold Timeout Signal Time Timeout STOP Save in DB. If this option is checked all the active signals will be saved in the database. If a signal is already in the DB, the software will add into its event list the level measure event labeled as levl. In bank. Type in a bank s name or select a standard name for storing found signals. If empty, signals will be given blank bank names. Pages Threshold and Sound recording of the Scan Range task contain settings similar to the Sweep Task s settings. Scan DB task 38

39 The Scan DB task allows the operator to scan signals from the database and check their activity i.e. if a signal s level exceeds the threshold. If such an activity is found the software allows the operator to listen to it and records sound within a pre-set interval. The conditions of the scan s continuation can be selected. Antenna - Antenna input Criteria of selection Change filter The criteria of a signal s selection are displayed here. The Change filter button opens the Filter window to change the criteria Continue, Timeout. These parameters have the same meaning as for the Scan Range task. Frequency Watch task The Frequency Watch task allows the operator to register activity of a given frequency. When a frequency s level exceeds the threshold the software starts sound recording within a pre-set interval. Conditions of finishing are selected by the user. If the frequency is inactive at the moment of the task s execution, the task is considered to be executed. To wait for a frequency s activation put a Frequency Watch task inside a group and set the necessary time in this group s settings. Input, Stop, Timeout. These parameters have a similar meaning to the Scan Range task s settings. 39