Skip to main content

Communication Analysis

Overview​

Communications Analysis helps you explore communication records such as phone calls, internet sessions, and SMS messages. You select record types and data sources, define focus identifiers, and then use maps, network graphs, timelines, and tables to find patterns and relationships. Inputs are telecom datasets already available in Octostar. Outputs are interactive visualizations, filtered record tables, and saved analysis configurations you can reload later.

When to Use This Application​

  • You need to analyze CDR, IPDR, or SMS data for a subject or group of subjects.
  • You need to identify frequent contacts and expand an investigation from primary to secondary identifiers.
  • You need to review movement and geographic hotspots from location-enabled records.
  • You need to compare activity across time windows using multiple time filter bands.
  • You need to save and reload an analysis configuration for collaboration or continuity.

Before You Begin​

  • Confirm the relevant telecom datasets are available in one or more workspaces.
  • Decide which record types you need: CDR (calls), IPDR (internet sessions), or SMS (messages).
  • Collect starting identifiers for your primary subject, such as a phone number, IMSI, IMEI, or IP address.

Step-by-Step Walkthrough​

Step 1 — Select your data​

Use the left sidebar to define which records the app analyzes.

Choose record types​

Toggle record types on or off:

  • Call Detail Records (CDR)
  • IP Detail Records (IPDR)
  • SMS Each type shows a record count.

Select workspaces​

Select the workspace(s) that contain relevant datasets by checking the boxes next to their names.

Select data sources​

Within each workspace, select the data sources you want to include. Each data source shows a record count. Use these selections to narrow the analysis scope.

Step 2 — Define your focus identifiers​

Use Focus Identifiers to define the subjects you investigate. Each focus identifier receives a unique color used across the map, graph, timeline, and tables.

Supported identifier types include:

  • Phone number
  • IMSI
  • IMEI
  • IP address
  • Email address
  • Domain name To add an identifier:
  1. Select the + button in Focus Identifiers.
  2. Enter the identifier value.
  3. Select the identifier type.
  4. Confirm.

To manage the list:

  • Check or uncheck an identifier to include or exclude it without deleting it.
  • Select the X next to an identifier to remove it.
  • Use the search field to filter the list.
  • Toggle the type view to switch between identifier categories.

If targets are pre-configured by an administrator, use the Targets section to toggle them on or off. Targets populate focus identifiers automatically.

Step 3 — Apply time filters​

Use Time Filters to restrict analysis to specific periods. You can:

  • Drag on the temporal bar chart to select a date/time range.
  • Create up to four separate time filter bands with distinct colors for side-by-side comparison.
  • Edit or remove time filters.

Step 4 — Apply geo filters​

Use Geo Filters to restrict analysis to records inside a geographic area.

  1. Select the polygon drawing tool on the map.
  2. Draw a shape around the area of interest.
  3. Name the filter and confirm. The geo filter appears in the list. Enable, disable, or delete geo filters as needed. The filter applies only to records with location data inside the drawn area.

Step 5 — Explore the main panels​

The main content area contains resizable panels. You can expand a panel to full screen using the expand icon in the panel title bar. You can also collapse the left sidebar to increase screen space.

Positions map (top-left)​

Use the map to review geographic locations derived from records:

  • Pan and zoom to explore.
  • Select markers to see which identifiers are present.
  • Draw polygons on the map to create geo filters. Focus identifiers use consistent colors across the interface.

Relationships network graph (top-right of map area)​

Use the graph to explore who communicates with whom:

  • Nodes represent identifiers.
  • Lines represent communication links.
  • Drag nodes to adjust layout.
  • Hover over nodes and links to view details.

Records table (center)​

Use the table to review individual records filtered by your selections. Tabs switch between CDR, IPDR, and SMS. Typical columns include:

  • Date and time
  • From / To phone number
  • From / To IMSI and IMEI
  • From / To IP address
  • Call or session duration
  • Data volume, service, protocol (IPDR)
  • Associated persons (if linked) I nteractions:
  • Select a column header to sort (select again to reverse).
  • Select an identifier value in the table to add it to your focus list.
  • Focus identifiers are highlighted in their assigned colors.

Top identifiers chart (center-right)​

Use the bar chart to identify the most frequent contacts of your focus identifiers.

  • Use the dropdown to choose how many identifiers to show (default is 10).
  • Select a bar to add that identifier to your focus list.

Timeline (right panel)​

The timeline has two tabs:

  • Timeline tab (scatter plot): each dot is one event. Use it to spot bursts and synchronized activity. Use the duration slider to filter events by call duration.
  • Temporal filters tab (stacked bar chart): shows record volume over time. Use it to select time ranges and create time filters.

Step 6 — Save and reload an analysis​

To save your current analysis state, select Save (disk icon). The saved state includes:

  • Focus identifiers
  • Selected workspaces and data sources
  • Time and geo filters
  • Selected targets Enter a name when prompted. You can reload the analysis later by opening the saved analysis record.

Understanding the Output​

Communications Analysis outputs are interactive and update immediately when you change filters or focus identifiers.

  • Map output shows positions derived from records. Colors correspond to focus identifiers.
  • Network graph shows communication links between focus identifiers and related identifiers.
  • Records table shows raw events filtered by record type, time, geo, workspace, and data source selections.
  • Top identifiers highlights the most frequent contacts so you can expand focus.
  • Timeline views show activity over time and support time-range selection and comparison.

Filters combine across types. If you use time and geo filters together, the app shows only records that satisfy all active filters. Within a single filter type, selections are inclusive (for example selecting two data sources includes records from either one).

Saving and Exporting Results​

The app supports saving your analysis configuration for reuse.

  • Save
    • What it does: saves your current analysis state (focus identifiers, sources, and filters)
    • Where it ends up: stored as a saved analysis record you can reopen
    • Settings: analysis name

Tips for Best Results​

  • Start with one primary identifier, then expand using Top Identifiers and table click-to-add.
  • Use time filters early to reduce noise, then add geo filters for specific locations.
  • Use multiple time filter bands (up to four) to compare periods side by side.
  • Collapse the sidebar and expand panels when you need more space for map or timeline review.
  • Treat map outputs as dependent on source location quality. Validate against record details.

Known Limitations​

  • The app supports up to four simultaneous time filter bands.
  • Geo analysis depends on location data being present. Some records do not have positions.
  • Combining multiple filters can hide records. Clear filters when results look unexpectedly empty.