O
S
C
R
™
OMNI SPECTRAL CORRELATOR
-
5
0
VER 5.0
OWNERS GUIDE
Страница 1: ...O O OS S SC C CO O OR R R OMNI SPECTRAL CORRELATOR O O OS S SC C C 5 5 50 0 00 0 00 0 0 VER 5 0 OWNERS GUIDE...
Страница 2: ...is manual are used only for identification purposes and are trademarks or registered trademarks of their respective holders See REI s website at www reiusa net for additional information Serial Number...
Страница 3: ...up Menu 14 QUICK START EXERCISES 15 Exercise 1 Listen To A Radio Station 15 Exercise 2 Analyze A Bugging Device 19 Exercise 3 Basic Methods To Detect Threat Transmitters 21 SECTION 3 OSCOR MANUAL OPE...
Страница 4: ...orrelate Options Acoustic Correlator System Automatic 78 STEP 3 LOAD FRIENDLY DATABASE 80 STEP 4 START AUTO MODE 81 SECTION 5 DETECTING SOPHISTICATED TRANSMITTERS 83 SOME SOPHISTICATED TRANSMITTER TYP...
Страница 5: ...CH 101 MONITORING A MEETING IN PROGRESS 103 TESTING TELEPHONES WITH OSCOR 104 Testing for Hot Phones or Hook Switch By Pass Bugs 104 Testing the Telephone Lines for Carrier Current 105 Testing Telepho...
Страница 6: ......
Страница 7: ...DE SCREEN DISPLAY WITH NARROW BANDWIDTH 31 FIGURE 20 MULTIPLE SWEEP DISPLAYS 33 FIGURE 21 AVERAGED SPECTRUM DISPLAY EXAMPLE 36 FIGURE 22 DIFFERENCE MODE DISPLAY 37 FIGURE 23 DIFFERENCE ONLY TRACE DISP...
Страница 8: ...MENU 76 FIGURE 55 AUTO MODE CORRELATE SET UP MENU 78 FIGURE 56 AUTO MODE START MENU 80 FIGURE 57 AUTO MODE RUNNING LOAD FRIENDLY 2 CYCLES COMPLETED 80 FIGURE 58 AUTO MODE RUNNING PASSIVE CORRELATE 2 C...
Страница 9: ...functions and then to learn how to use the functions together to perform a sweep The best method of becoming proficient with the OSCOR is to study the manual and attend REI training courses For inform...
Страница 10: ...AND EQUIPMENT DESCRIPTION REI OSC 5000E 2 OSCOR EQUIPMENT DESCRIPTION This section provides an overview of the equipment and features of the OSCOR It does not cover OSCOR operation Main Panel FIGURE...
Страница 11: ...ional power cord compatible 115 230 VAC switch selectable 50 60 Hz or external 12 18 VDC input 15 Control RF Cables connects main unit and antenna array VLF MF provides input for 10 kHz to 5 MHz HF UH...
Страница 12: ...has 4 function buttons F1 to F4 and a MENU button These buttons are multi use buttons and the functions are always labeled on the OSCOR display screen For example in the OSCOR display figure below F1...
Страница 13: ...th of 850 1050 nM and modulation of 15 kHz to 5 MHz 5 Status Indicators shows the antenna currently selected 6 AC VLF not shown in picture OSCOR AC power cord is also a probe called AC VLF probe It is...
Страница 14: ...to 115 VAC and the unit is plugged into 230 VAC the unit will not be damaged but the green LED will go dark and you must unplug the unit to cool down for approximately 30 minutes for the internal prot...
Страница 15: ...and depth of discharge Typical charging time is approximately 4 6 hours Charging a completely drained battery may require a 12 16 hour overnight charge External DC Power When connected to an external...
Страница 16: ...phone or inputs to the EXT REF audio input The may Miniature Microphone be used with the Audio Patch Cord to provide a remote microphone input 2 OSCOR Video Patch Cord This patch cord allows received...
Страница 17: ...l injury may result 8 Locator Probe The Locator Probe is an RF antenna used to locate RF Digital and Analog transmitters The probe provides a localized signal strength input that the OSCOR converts to...
Страница 18: ...ge of the OSCOR spectrum analyzer Microwave signals tend to be directional so the MDC features high gain directional antennas The MDC options are compatible with the OPC Interface and the OTL locator...
Страница 19: ...n The OSCOR OPC Software is covered in the OPC software manual The main sections that describe OSCOR functionality are SECTION 3 OSCOR MANUAL OPERATION page 27 SECTION 4 OSCOR AUTOMATIC OPERATION page...
Страница 20: ...t up Screen Pressing MENU again will enter the default Manual Mode Control FIGURE 8 OSCOR OPENING SCREEN AND DEFAULT SWEEP DISPLAY Pressing the OFF Button will provide access to some additional menus...
Страница 21: ...coarse descriptions of OSCOR button functions Use the F3 and F4 buttons to page up and down and the F1 and F2 buttons to scroll through the pages of the various sections Reset Button A reset button is...
Страница 22: ...Menu F1 displays a system information screen F2 sets the display options including the system units F3 provides display and control of the battery charging operation F4 provides access to the real ti...
Страница 23: ...ree 3 excercises are provided 1 Listen to a radio station 2 Analyse a simple eavesdropping device 3 Basic methods of detection Exercise 1 Listen To A Radio Station This exercise has two parts The purp...
Страница 24: ...hipH This indicates that the OSCOR is still sweeping across the frequency spectrum but the cursor is simply pointing to the desired signal of interest If you turn up the volume at this point you will...
Страница 25: ...antenna 5 MHz to 1505 MHz Use the rotary dial and move the cursor near 100 MHz Do not try to get it exactly anywhere from 85 to 115 is fine Press the NARROW button 5 times or until the screen is simi...
Страница 26: ...o to any signal for which the frequency is known To practice it is recommend that you look at several different signals throughout the frequency spectrum such as pager transmissions television signals...
Страница 27: ...d audio signal and the transmit frequency is known Use the EXPAND and NARROW buttons to search for the signal associated with the transmitter If the transmitter is close it should be the strongest sig...
Страница 28: ...io station Press the F4 button to turn on a confirm ringer You may need to adjust the volume of the ringer using F1 F2 or F3 From the SPECT or CORR screens Press SWEEP ANALYZE to return NOTE The corre...
Страница 29: ...n AM or FM modulated audio signal Take the OSCOR outside of the building Turn the unit on and press the MENU button to enter the Auto Configuration Menu NOTE For this quick start exercise all of the a...
Страница 30: ...he MENU button to exit and return to the main auto mode set up menu with the OSCOR in the sweep display mode Press the MENU button to enter the Manual Mode Allow the OSCOR to sweep across the screen a...
Страница 31: ...button to enter the Analyze mode Adjust the volume and listen to the signal As the volume is increased you should hear feedback 3b Automatic Mode to find threat signal This exercise assumes that the...
Страница 32: ...the UP and DOWN keys and the rotary dial to select and listen to the different signals The column labeled Thrt Pk lists the detected Threat Level Friendly Signals will be labeled AUTOFRND and newly d...
Страница 33: ...There are many other OSCOR functions that are covered in this manual These exercises were intended to provide the user with a basic working knowledge of some of the more important OSCOR functions The...
Страница 34: ......
Страница 35: ...ing basic types of demodulation AM FM Sub Carrier Single Sideband 3 CORRELATION Provides a function to determine if the signal audio is identical to the current room audio 4 Triangulate Mode or Locato...
Страница 36: ...intermediate frequency bandwidth Available bandwidths are 250 kHz 15 kHz and 6 kHz see Figure 16 Antenna Input Configurations F3 selects the demodulator for audio monitoring Available demodulation sc...
Страница 37: ...Frequency Modulated FM signals and wide band Amplitude Modulated AM signals see page 40 Demodulators The rapid refresh rate of the display will show the dynamics of the spectrum such as modulation pe...
Страница 38: ...xt frequency span when the cursor reaches a screen end limit Entering the desired frequency directly on the keypad can also move the cursor The cursor can be positioned over any signal to identify its...
Страница 39: ...EN DISPLAY WITH WIDE BANDWIDTH Furthermore the narrow 15 kHz and 6 kHz are designed primarily for narrow band FM and AM signals In the above example these filters will indicate if two signals are hidi...
Страница 40: ...gahertz using the keypad 1 Type the desired frequency 2 Press ENTER To enter a frequency kilohertz using the keypad 1 Type in the desired frequency 2 Press the k MHz button to change the units mode to...
Страница 41: ...race data This image is not stored in RAM memory and is completely reset whenever the frequency display window is altered in any way Difference Trace Display This mode displays the difference between...
Страница 42: ...y operation See Page 80 Step 3 Load Friendly Database The OSCOR will capture Friendly trace data for all of the inputs that are selected for automatic operation but the OSCOR will not create a signal...
Страница 43: ...he OSCOR will capture Peak Trace data for all of the inputs that are selected but the OSCOR will not create a signal database To Capture Peak Trace data 1 Ensure that the OSCOR is in the Sweep Mode 2...
Страница 44: ...integration data is completely reset FIGURE 21 AVERAGED SPECTRUM DISPLAY EXAMPLE In the above Figure the Radio station 98 5 is hiding a narrow band snuggled transmitter By using the 15KHz bandwidth an...
Страница 45: ...y also prove to be useful when trying to determine the location of a transmitter within an environment You may wish to compare the RF spectrum of one room to another room There are three difference mo...
Страница 46: ...tion keys in the Analyze Mode is identical to the Sweep Mode FIGURE 25 ANALYZE MODE SCREEN DISPLAY The analyze display screen contains two plots The plot on the left half of the screen is the frequenc...
Страница 47: ...an oscilloscope view of the demodulated signal see page 51 Oscilloscope Analysis Audio Spectrum Analysis Screen This graph may be changed to display the OSCOR phase correlator results Depending on the...
Страница 48: ...ll percentage of AM modulation due to poor oscillator buffer design unregulated power supplies or effects of antenna reflection AM modulated devices may also contain a small percentage of FM modulatio...
Страница 49: ...ly useful mode when manually tuning a signal because the OSCOR will automatically lock on a signal and if the signal drifts in frequency the AFT function will track the signal The AFT function is iden...
Страница 50: ...button labeled ANLZ 3 Press the F3 button labeled SNUGGLE 4 Press the F1 buttons labeled START This will change the Analyze display to a narrow band 6 kHz and integrate the frequency spectrum If a snu...
Страница 51: ...equency analysis Data Functions STORE RECALL OSCOR has two types of information that can be stored for recall signal information and frequency sweep span information The signal storage capabilities ca...
Страница 52: ...the date and time The fifth column labeled Thrt Pk indicates the threat level of the stored signal These values may be labeled with numeric values of 1 to 5 FRIENDLY for friendly signals or DECLARE to...
Страница 53: ...through the available threat levels USERFRN NO CORR 1 2 3 4 5 DECLARE Press F3 to immediately change the level to a FRIENDLY signal To delete a signal stored in the database 1 Use the RECALL button i...
Страница 54: ...of less than 5 encounters This mode is used to eliminate detected noises that are not associated with real signals 6 Press F1 to confirm the deletion process Sweep Span Storage The OSCOR has 6 pre pro...
Страница 55: ...pan in memory 1 In the Sweep Mode choose the desired sweep input frequency span demodulator and bandwidth using the Frequency Display controls 2 Press the STORE button to save the span in memory 3 Pre...
Страница 56: ...have a reference audio signal In the Correlate Mode the OSCOR constantly compares the audio arriving through the receiver system with the reference audio signal If the two audio signals are similar w...
Страница 57: ...page 104 Testing Telephone with OSCOR The default operation is to monitor the audio from the received signals To monitor the main receiver system 1 Press the EXT button to access the Audio Monitor Me...
Страница 58: ...ter left of the top of the display as SPEAKER FILTER ON or SPEAKER FILTER OFF Volume Control The volume control increases or decreases received or monitored audio levels to the internal speaker or hea...
Страница 59: ...functions To provide a reliable sound source to confirm threats when using the Correlator Mode manually see page 54 Correlate Confirm Mode To provide an audible alert in the Automatic Mode see page 7...
Страница 60: ...Audio Spectrum Analysis Screen press the SPECT button To configure the Audio Spectrum Analysis Screen 1 In the Audio Spectrum Analysis Mode press the MENU button labeled CONFIG 2 Press F1 to toggle th...
Страница 61: ...s 1 Select the desired signal in the Analyze Mode 2 Press the CORR button to enter the Correlate Mode Press CORR again or the SWEEP ANALYZE to return to the Analyze Mode Use the EXPAND and NARROW butt...
Страница 62: ...orrelator confirm ringer 1 With a signal selected in the Analyze Mode press the CORR button to enter the Correlate Mode 2 Press F4 labeled CONFIRM or the TONE button to activate a ringer tone output f...
Страница 63: ...ected frequency antenna input bandwidth used and demodulator selected Whether lists are created in Automatic or Manual Mode their appearance will be similar In Automatic Mode the type of signal list a...
Страница 64: ...o provide a gap for the paper NOTE Thermal paper should be stored in a dark room at an average temperature less than 25 degrees Celsius and a relative humidity less than 65 Under these conditions new...
Страница 65: ...rmanently connected to an output source If you use a tape recorder not supplied by REI the recorder must have a remote jack for on off motor control Normally a smaller 2 5mm sub mini phone jack is use...
Страница 66: ...rs and most modern tape recorders do not contain bias oscillators and therefore this detection process is not valid However it is still included here to make the user aware of the capability FIGURE 35...
Страница 67: ...in the Analyze Mode 3 Press the THREAT button to bring up the Threat Locator Menu 4 Press the F1 button labeled Probeoff to turn on the locator function 5 Adjust the volume control to an acceptable l...
Страница 68: ...There is not a separate locator probe for locating infrared threats It is important to note that infrared signals must be in line of sight between the OSCOR detector and either the infrared transmitt...
Страница 69: ...meter of the building while scanning for IR threats On sunny days the OSCOR IR probe should be shaded from direct sunlight or bright reflections to prevent overload from the Sun direct sunlight will n...
Страница 70: ...the antenna panel as described below Since the method relies on sonic ranging the most accurate results are achieved when the eavesdropping device is in line of sight to the OSCOR and on the exterior...
Страница 71: ...000 device is pointing in the direction of the microphone The OSCOR in this mode displays the range to the bug The spikes on the screen represent the sound of the clicking being received by the bug Th...
Страница 72: ...e FIGURE 43 OTL LOCATION SCREEN TECHNICAL NOTE It is very important to hold the clicking device in the correct position while making measurements Position errors of only a few inches at the clicking d...
Страница 73: ...e method as an audio transmitter or by simply studying the picture NOTE Here is another novel method to identify and locate a video transmitter First test the room by listening to the audio sound of t...
Страница 74: ...ollow NTSC standards with the exception that the video signal is FM modulated instead of AM Or the video synchronization pulse may be inverted in order to confuse the normal video demodulation process...
Страница 75: ...kHz In this case the OSCOR loop antenna may be removed from the antenna panel and used as a locator probe see page 58 Locating Low Frequency RF 10 kHz 500 kHz The success of this approach depends on...
Страница 76: ......
Страница 77: ...This map is also included at the end of this manual in the Quick Reference Guide Correlate method may be set to PASSIVE VERIFY or ACTIVE Configure the Correlation process for automatic operation Confi...
Страница 78: ...f the signals and traces that are currently stored in the OSCOR To review the automatic options Press the F2 button labeled SETUP AUTO OPTIONS To load a friendly database Press the F3 button labeled S...
Страница 79: ...of the data that is currently stored in the OSCOR This data is broken into two sections signal data and trace data FIGURE 47 AUTO MODE MEMORY AND DATA MANAGE MENU F1 is used to review the signal data...
Страница 80: ...lity to F1 INPUT SPANS Edit the available antenna inputs for automatic searching This is the same as pressing the RECALL button in the SWEEP mode FIGURE 49 AUTO MODE INPUT SPANS F2 VIEW NOTES The abil...
Страница 81: ...t Alert tone threat signal plotting automat F3 ic audio recording of threat signals and status of the OSCOR display FIGURE 51 AUTO MODE SETUP OPTIONS F4 CORRELAT OPTIONS Sets up the Correlator operati...
Страница 82: ...P Lo 500 kHz 5 5 MHz WHIP Hi 5 MHz 1505 MHz DISCONE 1505 MHz 3005 MHz MDC 3 GHz 21 GHz INFRARED 10 kHz 5 MHz AC VLF 10 kHz 5 MHz FIGURE 53 PRE PROGRAMMED DEFAULT INPUT SPANS The AC VLF Mode checks the...
Страница 83: ...and slow process of Deep Dig To select the sweep inputs 1 Go to the Input spans menu as described above in Figure 49 2 Use the UP DOWN buttons to select the desired sweep span 3 Press the F1 button m...
Страница 84: ...to Mode Menu FIGURE 54 AUTO MODE OUTPUT OPTION MENU Automatic Mode Audible Alert Using this option the OSCOR will provide an audible alert when a threat is detected in the Automatic Mode A signal is c...
Страница 85: ...tyle 1 line 2 line block and chart modes 1 Enter the Automatic Mode Output Configuration Menu as described above 2 Press the F2 button labeled PLOT STYLE under the Outputs Menu to toggle the plotting...
Страница 86: ...AUTO 2 Press the F2 button labeled CONFIG CORR FIGURE 55 AUTO MODE CORRELATE SET UP MENU IN THIS MENU THE FOLLOWING BUTTONS PERFORM THE INDICATED FUNCTIONS F1 toggles the Correlate method between LD F...
Страница 87: ...the function vs time In this Correlation Analyze Mode the threat level indicates the average of the threat correlation over the specified time window This average threat level is stored in memory alo...
Страница 88: ...aded with the majority of the ambient environment signals NOTE When the automatic mode is run in the normal mode searching for bugs signals labeled as friendly are ignored unless the signal strength l...
Страница 89: ...dly signal for correlation This mode is used in the target sweep environment specifically to look for bugging devices FIGURE 58 AUTO MODE RUNNING PASSIVE CORRELATE 2 CYCLES COMPLETED When running in t...
Страница 90: ......
Страница 91: ...he user is doing with the OSCOR or whether or not the OSCOR is in manual or automatic mode the OSCOR Peak Display memory buffer is constantly being updated Therefore if energy is captured from a short...
Страница 92: ...e may appear to be multiple low level signals that are frequency hopping Burst Transmitters Burst Transmitters are devices that store audio information for a period of time and then in a single burst...
Страница 93: ...ing the normal automatic and manual functions If you have additional time the OSCOR should be placed in the Sweep mode with the Whip Hi Antenna selected Simply letting the unit sit in this mode for se...
Страница 94: ...mainly to explain the concept of the Peak Display mode This is a simple paging transmission band with 3 primary channels The channel in the middle is transmitting while the two outside channels were...
Страница 95: ...e low level signals that are frequency hopping If you are unsure if the signal is a threat try the procedures described on page 98 Suspicious Signals The best method to identify potential spread spect...
Страница 96: ...E 63 BURST TRANSMITTER PEAK DISPLAY 1500MHZ AND 250MHZ SPAN The Figure below is provided as an alternate example simply to point out that you may capture different portions of the burst signal or poss...
Страница 97: ...FREQUENCY HOPPING EXAMPLE The above figure shows the various channels associated with a frequency hopping transmitter If a frequency hopping signal is found in the frequency spectrum it is very diffic...
Страница 98: ...f the signal is stronger outside the building than any of the inside locations the signal is probably not an eavesdropping device within the building 6 If the signal strength is stronger inside the bu...
Страница 99: ...ore organizations should perform mini sweeps at least once a week and before and after important meetings These should include physical inspection of all office spaces and easily accessible wiring and...
Страница 100: ...ended that the sweep be conducted in the evenings or on weekends A sweep should be performed as soon as possible after the sweep team has been contacted in order to minimize the possibility of personn...
Страница 101: ...Information Security procedures o Personnel security procedures and background checks Contents of the target environment furniture computer equipment electronic equipment etc Basic suggested procedure...
Страница 102: ...uency hopper has been encountered sometime during the previous sweep activities the evidence will be displayed in the Peak display minus the Real time display 14 Differences in these displays should b...
Страница 103: ...ory This procedure should be exercised with caution or not used at all TECHNICAL NOTE There are many intermittent signals that are only detected occasionally such as a digital pager or a cellular phon...
Страница 104: ...e drapes or mini blinds should be closed to make sure no one observes your activities If the windows are large it may be necessary to move the OSCOR to several locations when sweeping for infrared sig...
Страница 105: ...may be on different circuits and may not transmit carrier current if the building is large and the electrical circuits are transformer coupled Each electrical outlet should be taken apart for inspect...
Страница 106: ...cted in the passive method When performing a dedicated sweep it is important not to overlook any signals The search level should not be set to FASTSKIM The MED HUNT level is recommended To ensure that...
Страница 107: ...harmonic is stable and accurate OSCOR s automatic software will calculate and label the presence of the harmonic H1 H2 etc Some transmitting devices containing a lower frequency oscillator and multipl...
Страница 108: ...may re radiate a similar signal at 455 kHz or 10 7 MHz above or below the normal frequency Moderate LED displays Low frequency noise on the RF Loop from the internal display system pulsing the LED Lo...
Страница 109: ...acoustic leakage recommend REI ALP 700 Camera or video camera to record evidence NOTE 1 An ultraviolet pen can be used to mark the screw positions for all electrical outlets computers and telephones...
Страница 110: ...und transfer through heating and cooling vents Place a sound source directly in front of each air vent in the target area Listen to all the air vents within a large area to determine potential acousti...
Страница 111: ...tion as if it were located in the target environment During the meeting the OSCOR can be locked in a closet running in the Automatic Mode printing and storing all threats for later review or a securit...
Страница 112: ...UDIO panel 4 Press the F1 button labeled MONITOR RECEIVER until the display label reads MONITOR REFERENCE 5 Connect the alligator clips on the Balanced Audio Coupler BAC 5000 to the desired pair of co...
Страница 113: ...AC VLF input with the OSCOR the Sweep Mode 4 Tune to each signal that occurs and analyze it for threat potential 5 Test each combination of conductors for carrier current signals Testing Telephones fo...
Страница 114: ......
Страница 115: ...ory Optical Encoder 128 Pulse Rev with variable count ratio Program Key 64K Byte ROM Display 128 x 256 Segment Graphics Supertwist LCD Printer 192 Dot Per Line Graphics on 2 wide thermal paper Audio S...
Страница 116: ......
Страница 117: ...103 Burst Bugs 34 Burst Transmitter 83 88 Burst Transmitters 84 C Carrier Current 5 97 Charging 7 Conducting a sweep 91 Confirm 54 CORR 53 Correlate Plots 55 Correlator Automatic 78 Manual 53 Correla...
Страница 118: ...76 P Paper Installation 56 Parabolic Reflector 62 Peak Spectrum Display 34 Phone Coupler 8 Physical Search 101 Pre Loading Friendly Signals 94 Program key 7 Programming the Auto Mode 69 R Ranging 61...
Страница 119: ...one Adaptor 8 Coupler 8 Telephone Testing 104 Carrier Current 105 Hook Switch By Pass 104 Hot Phones 104 Threat Level 53 Locating 58 Signal Storage 43 type 92 Threat Signals 102 Time Clock 14 Tone Rin...
Страница 120: ......
Страница 121: ...ARROW Displays the minimum available Frequency Span SHIFT UP Shifts the Frequency display up a half Screen SHIFT DOWN Shifts the Frequency display down a half Screen SHIFT 000 Display Battery Voltage...
