OSCOR OSC 5000 Owner'S Manual Download Page 9 | Manualshive

Page: 9 / 121

OSCOR OSC 5000 Owner'S Manual Download Page 9

SECTION 1: INTRODUCTION AND EQUIPMENT DESCRIPTION

1

REI

OSC-5000E

SECTION 1: INTRODUCTION AND

EQUIPMENT DESCRIPTION

FIGURE 1 OSCOR-5000E WITH MDC-2100

This manual is provided for the operational control of the OSCOR – 5000E unit. It
contains

background information and step

-by-step instructions on how to perform the

OSCOR functions. It is arranged to learn the functions, and then to learn how to use the
functions together to perform a sweep.

The best method of becoming proficient with the OSCOR is to study the manual and
attend REI training courses. For information about these courses visit

www.reiusa.net

.

The manual for the OSCOR OPC software is provided in a separate document. It is
highly recommended that the OSCOR unit be understood before attempting to use the
OPC software.

This section of the manual provides an introduction to the OSCOR equipment. The main
operational functions are covered in later sections.

«
...
7
8
9
10
11
...
»

Summary of Contents for OSC 5000

Page 1: ...O O OS S SC C CO O OR R R OMNI SPECTRAL CORRELATOR O O OS S SC C C 5 5 50 0 00 0 00 0 0 VER 5 0 OWNERS GUIDE...

Page 2: ...is manual are used only for identification purposes and are trademarks or registered trademarks of their respective holders See REI s website at www reiusa net for additional information Serial Number...

Page 3: ...up Menu 14 QUICK START EXERCISES 15 Exercise 1 Listen To A Radio Station 15 Exercise 2 Analyze A Bugging Device 19 Exercise 3 Basic Methods To Detect Threat Transmitters 21 SECTION 3 OSCOR MANUAL OPE...

Page 4: ...orrelate Options Acoustic Correlator System Automatic 78 STEP 3 LOAD FRIENDLY DATABASE 80 STEP 4 START AUTO MODE 81 SECTION 5 DETECTING SOPHISTICATED TRANSMITTERS 83 SOME SOPHISTICATED TRANSMITTER TYP...

Page 5: ...CH 101 MONITORING A MEETING IN PROGRESS 103 TESTING TELEPHONES WITH OSCOR 104 Testing for Hot Phones or Hook Switch By Pass Bugs 104 Testing the Telephone Lines for Carrier Current 105 Testing Telepho...

Page 6: ......

Page 7: ...DE SCREEN DISPLAY WITH NARROW BANDWIDTH 31 FIGURE 20 MULTIPLE SWEEP DISPLAYS 33 FIGURE 21 AVERAGED SPECTRUM DISPLAY EXAMPLE 36 FIGURE 22 DIFFERENCE MODE DISPLAY 37 FIGURE 23 DIFFERENCE ONLY TRACE DISP...

Page 8: ...MENU 76 FIGURE 55 AUTO MODE CORRELATE SET UP MENU 78 FIGURE 56 AUTO MODE START MENU 80 FIGURE 57 AUTO MODE RUNNING LOAD FRIENDLY 2 CYCLES COMPLETED 80 FIGURE 58 AUTO MODE RUNNING PASSIVE CORRELATE 2 C...

Page 9: ...functions and then to learn how to use the functions together to perform a sweep The best method of becoming proficient with the OSCOR is to study the manual and attend REI training courses For inform...

Page 10: ...AND EQUIPMENT DESCRIPTION REI OSC 5000E 2 OSCOR EQUIPMENT DESCRIPTION This section provides an overview of the equipment and features of the OSCOR It does not cover OSCOR operation Main Panel FIGURE...

Page 11: ...ional power cord compatible 115 230 VAC switch selectable 50 60 Hz or external 12 18 VDC input 15 Control RF Cables connects main unit and antenna array VLF MF provides input for 10 kHz to 5 MHz HF UH...

Page 12: ...has 4 function buttons F1 to F4 and a MENU button These buttons are multi use buttons and the functions are always labeled on the OSCOR display screen For example in the OSCOR display figure below F1...

Page 13: ...th of 850 1050 nM and modulation of 15 kHz to 5 MHz 5 Status Indicators shows the antenna currently selected 6 AC VLF not shown in picture OSCOR AC power cord is also a probe called AC VLF probe It is...

Page 14: ...to 115 VAC and the unit is plugged into 230 VAC the unit will not be damaged but the green LED will go dark and you must unplug the unit to cool down for approximately 30 minutes for the internal prot...

Page 15: ...and depth of discharge Typical charging time is approximately 4 6 hours Charging a completely drained battery may require a 12 16 hour overnight charge External DC Power When connected to an external...

Page 16: ...phone or inputs to the EXT REF audio input The may Miniature Microphone be used with the Audio Patch Cord to provide a remote microphone input 2 OSCOR Video Patch Cord This patch cord allows received...

Page 17: ...l injury may result 8 Locator Probe The Locator Probe is an RF antenna used to locate RF Digital and Analog transmitters The probe provides a localized signal strength input that the OSCOR converts to...

Page 18: ...ge of the OSCOR spectrum analyzer Microwave signals tend to be directional so the MDC features high gain directional antennas The MDC options are compatible with the OPC Interface and the OTL locator...

Page 19: ...n The OSCOR OPC Software is covered in the OPC software manual The main sections that describe OSCOR functionality are SECTION 3 OSCOR MANUAL OPERATION page 27 SECTION 4 OSCOR AUTOMATIC OPERATION page...

Page 20: ...t up Screen Pressing MENU again will enter the default Manual Mode Control FIGURE 8 OSCOR OPENING SCREEN AND DEFAULT SWEEP DISPLAY Pressing the OFF Button will provide access to some additional menus...

Page 21: ...coarse descriptions of OSCOR button functions Use the F3 and F4 buttons to page up and down and the F1 and F2 buttons to scroll through the pages of the various sections Reset Button A reset button is...

Page 22: ...Menu F1 displays a system information screen F2 sets the display options including the system units F3 provides display and control of the battery charging operation F4 provides access to the real ti...

Page 23: ...ree 3 excercises are provided 1 Listen to a radio station 2 Analyse a simple eavesdropping device 3 Basic methods of detection Exercise 1 Listen To A Radio Station This exercise has two parts The purp...

Page 24: ...hipH This indicates that the OSCOR is still sweeping across the frequency spectrum but the cursor is simply pointing to the desired signal of interest If you turn up the volume at this point you will...

Page 25: ...antenna 5 MHz to 1505 MHz Use the rotary dial and move the cursor near 100 MHz Do not try to get it exactly anywhere from 85 to 115 is fine Press the NARROW button 5 times or until the screen is simi...

Page 26: ...o to any signal for which the frequency is known To practice it is recommend that you look at several different signals throughout the frequency spectrum such as pager transmissions television signals...

Page 27: ...d audio signal and the transmit frequency is known Use the EXPAND and NARROW buttons to search for the signal associated with the transmitter If the transmitter is close it should be the strongest sig...

Page 28: ...io station Press the F4 button to turn on a confirm ringer You may need to adjust the volume of the ringer using F1 F2 or F3 From the SPECT or CORR screens Press SWEEP ANALYZE to return NOTE The corre...

Page 29: ...n AM or FM modulated audio signal Take the OSCOR outside of the building Turn the unit on and press the MENU button to enter the Auto Configuration Menu NOTE For this quick start exercise all of the a...

Page 30: ...he MENU button to exit and return to the main auto mode set up menu with the OSCOR in the sweep display mode Press the MENU button to enter the Manual Mode Allow the OSCOR to sweep across the screen a...

Page 31: ...button to enter the Analyze mode Adjust the volume and listen to the signal As the volume is increased you should hear feedback 3b Automatic Mode to find threat signal This exercise assumes that the...

Page 32: ...the UP and DOWN keys and the rotary dial to select and listen to the different signals The column labeled Thrt Pk lists the detected Threat Level Friendly Signals will be labeled AUTOFRND and newly d...

Page 33: ...There are many other OSCOR functions that are covered in this manual These exercises were intended to provide the user with a basic working knowledge of some of the more important OSCOR functions The...

Page 34: ......

Page 35: ...ing basic types of demodulation AM FM Sub Carrier Single Sideband 3 CORRELATION Provides a function to determine if the signal audio is identical to the current room audio 4 Triangulate Mode or Locato...

Page 36: ...intermediate frequency bandwidth Available bandwidths are 250 kHz 15 kHz and 6 kHz see Figure 16 Antenna Input Configurations F3 selects the demodulator for audio monitoring Available demodulation sc...

Page 37: ...Frequency Modulated FM signals and wide band Amplitude Modulated AM signals see page 40 Demodulators The rapid refresh rate of the display will show the dynamics of the spectrum such as modulation pe...

Page 38: ...xt frequency span when the cursor reaches a screen end limit Entering the desired frequency directly on the keypad can also move the cursor The cursor can be positioned over any signal to identify its...

Page 39: ...EN DISPLAY WITH WIDE BANDWIDTH Furthermore the narrow 15 kHz and 6 kHz are designed primarily for narrow band FM and AM signals In the above example these filters will indicate if two signals are hidi...

Page 40: ...gahertz using the keypad 1 Type the desired frequency 2 Press ENTER To enter a frequency kilohertz using the keypad 1 Type in the desired frequency 2 Press the k MHz button to change the units mode to...

Page 41: ...race data This image is not stored in RAM memory and is completely reset whenever the frequency display window is altered in any way Difference Trace Display This mode displays the difference between...

Page 42: ...y operation See Page 80 Step 3 Load Friendly Database The OSCOR will capture Friendly trace data for all of the inputs that are selected for automatic operation but the OSCOR will not create a signal...

Page 43: ...he OSCOR will capture Peak Trace data for all of the inputs that are selected but the OSCOR will not create a signal database To Capture Peak Trace data 1 Ensure that the OSCOR is in the Sweep Mode 2...

Page 44: ...integration data is completely reset FIGURE 21 AVERAGED SPECTRUM DISPLAY EXAMPLE In the above Figure the Radio station 98 5 is hiding a narrow band snuggled transmitter By using the 15KHz bandwidth an...

Page 45: ...y also prove to be useful when trying to determine the location of a transmitter within an environment You may wish to compare the RF spectrum of one room to another room There are three difference mo...

Page 46: ...tion keys in the Analyze Mode is identical to the Sweep Mode FIGURE 25 ANALYZE MODE SCREEN DISPLAY The analyze display screen contains two plots The plot on the left half of the screen is the frequenc...

Page 47: ...an oscilloscope view of the demodulated signal see page 51 Oscilloscope Analysis Audio Spectrum Analysis Screen This graph may be changed to display the OSCOR phase correlator results Depending on the...

Page 48: ...ll percentage of AM modulation due to poor oscillator buffer design unregulated power supplies or effects of antenna reflection AM modulated devices may also contain a small percentage of FM modulatio...

Page 49: ...ly useful mode when manually tuning a signal because the OSCOR will automatically lock on a signal and if the signal drifts in frequency the AFT function will track the signal The AFT function is iden...

Page 50: ...button labeled ANLZ 3 Press the F3 button labeled SNUGGLE 4 Press the F1 buttons labeled START This will change the Analyze display to a narrow band 6 kHz and integrate the frequency spectrum If a snu...

Page 51: ...equency analysis Data Functions STORE RECALL OSCOR has two types of information that can be stored for recall signal information and frequency sweep span information The signal storage capabilities ca...

Page 52: ...the date and time The fifth column labeled Thrt Pk indicates the threat level of the stored signal These values may be labeled with numeric values of 1 to 5 FRIENDLY for friendly signals or DECLARE to...

Page 53: ...through the available threat levels USERFRN NO CORR 1 2 3 4 5 DECLARE Press F3 to immediately change the level to a FRIENDLY signal To delete a signal stored in the database 1 Use the RECALL button i...

Page 54: ...of less than 5 encounters This mode is used to eliminate detected noises that are not associated with real signals 6 Press F1 to confirm the deletion process Sweep Span Storage The OSCOR has 6 pre pro...

Page 55: ...pan in memory 1 In the Sweep Mode choose the desired sweep input frequency span demodulator and bandwidth using the Frequency Display controls 2 Press the STORE button to save the span in memory 3 Pre...

Page 56: ...have a reference audio signal In the Correlate Mode the OSCOR constantly compares the audio arriving through the receiver system with the reference audio signal If the two audio signals are similar w...

Page 57: ...page 104 Testing Telephone with OSCOR The default operation is to monitor the audio from the received signals To monitor the main receiver system 1 Press the EXT button to access the Audio Monitor Me...

Page 58: ...ter left of the top of the display as SPEAKER FILTER ON or SPEAKER FILTER OFF Volume Control The volume control increases or decreases received or monitored audio levels to the internal speaker or hea...

Page 59: ...functions To provide a reliable sound source to confirm threats when using the Correlator Mode manually see page 54 Correlate Confirm Mode To provide an audible alert in the Automatic Mode see page 7...

Page 60: ...Audio Spectrum Analysis Screen press the SPECT button To configure the Audio Spectrum Analysis Screen 1 In the Audio Spectrum Analysis Mode press the MENU button labeled CONFIG 2 Press F1 to toggle th...

Page 61: ...s 1 Select the desired signal in the Analyze Mode 2 Press the CORR button to enter the Correlate Mode Press CORR again or the SWEEP ANALYZE to return to the Analyze Mode Use the EXPAND and NARROW butt...

Page 62: ...orrelator confirm ringer 1 With a signal selected in the Analyze Mode press the CORR button to enter the Correlate Mode 2 Press F4 labeled CONFIRM or the TONE button to activate a ringer tone output f...

Page 63: ...ected frequency antenna input bandwidth used and demodulator selected Whether lists are created in Automatic or Manual Mode their appearance will be similar In Automatic Mode the type of signal list a...

Page 64: ...o provide a gap for the paper NOTE Thermal paper should be stored in a dark room at an average temperature less than 25 degrees Celsius and a relative humidity less than 65 Under these conditions new...

Page 65: ...rmanently connected to an output source If you use a tape recorder not supplied by REI the recorder must have a remote jack for on off motor control Normally a smaller 2 5mm sub mini phone jack is use...

Page 66: ...rs and most modern tape recorders do not contain bias oscillators and therefore this detection process is not valid However it is still included here to make the user aware of the capability FIGURE 35...

Page 67: ...in the Analyze Mode 3 Press the THREAT button to bring up the Threat Locator Menu 4 Press the F1 button labeled Probeoff to turn on the locator function 5 Adjust the volume control to an acceptable l...

Page 68: ...There is not a separate locator probe for locating infrared threats It is important to note that infrared signals must be in line of sight between the OSCOR detector and either the infrared transmitt...

Page 69: ...meter of the building while scanning for IR threats On sunny days the OSCOR IR probe should be shaded from direct sunlight or bright reflections to prevent overload from the Sun direct sunlight will n...

Page 70: ...the antenna panel as described below Since the method relies on sonic ranging the most accurate results are achieved when the eavesdropping device is in line of sight to the OSCOR and on the exterior...

Page 71: ...000 device is pointing in the direction of the microphone The OSCOR in this mode displays the range to the bug The spikes on the screen represent the sound of the clicking being received by the bug Th...

Page 72: ...e FIGURE 43 OTL LOCATION SCREEN TECHNICAL NOTE It is very important to hold the clicking device in the correct position while making measurements Position errors of only a few inches at the clicking d...

Page 73: ...e method as an audio transmitter or by simply studying the picture NOTE Here is another novel method to identify and locate a video transmitter First test the room by listening to the audio sound of t...

Page 74: ...ollow NTSC standards with the exception that the video signal is FM modulated instead of AM Or the video synchronization pulse may be inverted in order to confuse the normal video demodulation process...

Page 75: ...kHz In this case the OSCOR loop antenna may be removed from the antenna panel and used as a locator probe see page 58 Locating Low Frequency RF 10 kHz 500 kHz The success of this approach depends on...

Page 76: ......

Page 77: ...This map is also included at the end of this manual in the Quick Reference Guide Correlate method may be set to PASSIVE VERIFY or ACTIVE Configure the Correlation process for automatic operation Confi...

Page 78: ...f the signals and traces that are currently stored in the OSCOR To review the automatic options Press the F2 button labeled SETUP AUTO OPTIONS To load a friendly database Press the F3 button labeled S...

Page 79: ...of the data that is currently stored in the OSCOR This data is broken into two sections signal data and trace data FIGURE 47 AUTO MODE MEMORY AND DATA MANAGE MENU F1 is used to review the signal data...

Page 80: ...lity to F1 INPUT SPANS Edit the available antenna inputs for automatic searching This is the same as pressing the RECALL button in the SWEEP mode FIGURE 49 AUTO MODE INPUT SPANS F2 VIEW NOTES The abil...

Page 81: ...t Alert tone threat signal plotting automat F3 ic audio recording of threat signals and status of the OSCOR display FIGURE 51 AUTO MODE SETUP OPTIONS F4 CORRELAT OPTIONS Sets up the Correlator operati...

Page 82: ...P Lo 500 kHz 5 5 MHz WHIP Hi 5 MHz 1505 MHz DISCONE 1505 MHz 3005 MHz MDC 3 GHz 21 GHz INFRARED 10 kHz 5 MHz AC VLF 10 kHz 5 MHz FIGURE 53 PRE PROGRAMMED DEFAULT INPUT SPANS The AC VLF Mode checks the...

Page 83: ...and slow process of Deep Dig To select the sweep inputs 1 Go to the Input spans menu as described above in Figure 49 2 Use the UP DOWN buttons to select the desired sweep span 3 Press the F1 button m...

Page 84: ...to Mode Menu FIGURE 54 AUTO MODE OUTPUT OPTION MENU Automatic Mode Audible Alert Using this option the OSCOR will provide an audible alert when a threat is detected in the Automatic Mode A signal is c...

Page 85: ...tyle 1 line 2 line block and chart modes 1 Enter the Automatic Mode Output Configuration Menu as described above 2 Press the F2 button labeled PLOT STYLE under the Outputs Menu to toggle the plotting...

Page 86: ...AUTO 2 Press the F2 button labeled CONFIG CORR FIGURE 55 AUTO MODE CORRELATE SET UP MENU IN THIS MENU THE FOLLOWING BUTTONS PERFORM THE INDICATED FUNCTIONS F1 toggles the Correlate method between LD F...

Page 87: ...the function vs time In this Correlation Analyze Mode the threat level indicates the average of the threat correlation over the specified time window This average threat level is stored in memory alo...

Page 88: ...aded with the majority of the ambient environment signals NOTE When the automatic mode is run in the normal mode searching for bugs signals labeled as friendly are ignored unless the signal strength l...

Page 89: ...dly signal for correlation This mode is used in the target sweep environment specifically to look for bugging devices FIGURE 58 AUTO MODE RUNNING PASSIVE CORRELATE 2 CYCLES COMPLETED When running in t...

Page 90: ......

Page 91: ...he user is doing with the OSCOR or whether or not the OSCOR is in manual or automatic mode the OSCOR Peak Display memory buffer is constantly being updated Therefore if energy is captured from a short...

Page 92: ...e may appear to be multiple low level signals that are frequency hopping Burst Transmitters Burst Transmitters are devices that store audio information for a period of time and then in a single burst...

Page 93: ...ing the normal automatic and manual functions If you have additional time the OSCOR should be placed in the Sweep mode with the Whip Hi Antenna selected Simply letting the unit sit in this mode for se...

Page 94: ...mainly to explain the concept of the Peak Display mode This is a simple paging transmission band with 3 primary channels The channel in the middle is transmitting while the two outside channels were...

Page 95: ...e low level signals that are frequency hopping If you are unsure if the signal is a threat try the procedures described on page 98 Suspicious Signals The best method to identify potential spread spect...

Page 96: ...E 63 BURST TRANSMITTER PEAK DISPLAY 1500MHZ AND 250MHZ SPAN The Figure below is provided as an alternate example simply to point out that you may capture different portions of the burst signal or poss...

Page 97: ...FREQUENCY HOPPING EXAMPLE The above figure shows the various channels associated with a frequency hopping transmitter If a frequency hopping signal is found in the frequency spectrum it is very diffic...

Page 98: ...f the signal is stronger outside the building than any of the inside locations the signal is probably not an eavesdropping device within the building 6 If the signal strength is stronger inside the bu...

Page 99: ...ore organizations should perform mini sweeps at least once a week and before and after important meetings These should include physical inspection of all office spaces and easily accessible wiring and...

Page 100: ...ended that the sweep be conducted in the evenings or on weekends A sweep should be performed as soon as possible after the sweep team has been contacted in order to minimize the possibility of personn...

Page 101: ...Information Security procedures o Personnel security procedures and background checks Contents of the target environment furniture computer equipment electronic equipment etc Basic suggested procedure...

Page 102: ...uency hopper has been encountered sometime during the previous sweep activities the evidence will be displayed in the Peak display minus the Real time display 14 Differences in these displays should b...

Page 103: ...ory This procedure should be exercised with caution or not used at all TECHNICAL NOTE There are many intermittent signals that are only detected occasionally such as a digital pager or a cellular phon...

Page 104: ...e drapes or mini blinds should be closed to make sure no one observes your activities If the windows are large it may be necessary to move the OSCOR to several locations when sweeping for infrared sig...

Page 105: ...may be on different circuits and may not transmit carrier current if the building is large and the electrical circuits are transformer coupled Each electrical outlet should be taken apart for inspect...

Page 106: ...cted in the passive method When performing a dedicated sweep it is important not to overlook any signals The search level should not be set to FASTSKIM The MED HUNT level is recommended To ensure that...

Page 107: ...harmonic is stable and accurate OSCOR s automatic software will calculate and label the presence of the harmonic H1 H2 etc Some transmitting devices containing a lower frequency oscillator and multipl...

Page 108: ...may re radiate a similar signal at 455 kHz or 10 7 MHz above or below the normal frequency Moderate LED displays Low frequency noise on the RF Loop from the internal display system pulsing the LED Lo...

Page 109: ...acoustic leakage recommend REI ALP 700 Camera or video camera to record evidence NOTE 1 An ultraviolet pen can be used to mark the screw positions for all electrical outlets computers and telephones...

Page 110: ...und transfer through heating and cooling vents Place a sound source directly in front of each air vent in the target area Listen to all the air vents within a large area to determine potential acousti...

Page 111: ...tion as if it were located in the target environment During the meeting the OSCOR can be locked in a closet running in the Automatic Mode printing and storing all threats for later review or a securit...

Page 112: ...UDIO panel 4 Press the F1 button labeled MONITOR RECEIVER until the display label reads MONITOR REFERENCE 5 Connect the alligator clips on the Balanced Audio Coupler BAC 5000 to the desired pair of co...

Page 113: ...AC VLF input with the OSCOR the Sweep Mode 4 Tune to each signal that occurs and analyze it for threat potential 5 Test each combination of conductors for carrier current signals Testing Telephones fo...

Page 114: ......

Page 115: ...ory Optical Encoder 128 Pulse Rev with variable count ratio Program Key 64K Byte ROM Display 128 x 256 Segment Graphics Supertwist LCD Printer 192 Dot Per Line Graphics on 2 wide thermal paper Audio S...

Page 116: ......

Page 117: ...103 Burst Bugs 34 Burst Transmitter 83 88 Burst Transmitters 84 C Carrier Current 5 97 Charging 7 Conducting a sweep 91 Confirm 54 CORR 53 Correlate Plots 55 Correlator Automatic 78 Manual 53 Correla...

Page 118: ...76 P Paper Installation 56 Parabolic Reflector 62 Peak Spectrum Display 34 Phone Coupler 8 Physical Search 101 Pre Loading Friendly Signals 94 Program key 7 Programming the Auto Mode 69 R Ranging 61...

Page 119: ...one Adaptor 8 Coupler 8 Telephone Testing 104 Carrier Current 105 Hook Switch By Pass 104 Hot Phones 104 Threat Level 53 Locating 58 Signal Storage 43 type 92 Threat Signals 102 Time Clock 14 Tone Rin...

Page 120: ......

Page 121: ...ARROW Displays the minimum available Frequency Span SHIFT UP Shifts the Frequency display up a half Screen SHIFT DOWN Shifts the Frequency display down a half Screen SHIFT 000 Display Battery Voltage...

Reviews:

No comments