
65
moBile forensiCs
Tools such as THREADS can analyze calling patterns, using attributes such as
who initiated the call, the length of the call, frequency of calls between individuals,
and when various people are called to determine who has leadership roles in a poten-
tial ring and the probability certain events are related. For example, if Jim calls Jane
for 1 minute and then Jim calls Steve 30 seconds after ending the call with Jane—and
this pattern is repeated a few times during a month—the likelihood that the calls
between Jim and Jane and the calls between Jim and Steve are related is very high. On
the other hand, if Jim calls Jane for 1 ...