CDR Analysis & Cell Tower Mapping for Attorneys | Elite Digital Forensics
01 / 10
Elite Digital Forensics — Attorney Explainer Series
Telecommunications Forensics

CDR Analysis and Cell Tower Mapping

Prosecutors present cell tower evidence as near-GPS precision. Courts are increasingly scrutinizing that premise. This briefing explains how towers actually work, what a sector azimuth does and does not tell you, and where expert analysis changes outcomes on both sides of the courtroom.

12 min read Verified case law 2012 to 2024 Attorney focused Updated June 2026
After reading this you will be able to
01
Explain what a CDR actually records
Distinguish metadata from content, and tower ID from a coordinate, for motion practice and cross-examination.
02
Read sector azimuth data
Understand how antenna direction defines a coverage arc and why that arc is not a location pinpoint.
03
Identify testimony overreach
Spot the five most common expert errors in CDR testimony and build cross-examination questions around each.
04
Apply Carpenter and its progeny
Frame suppression motions and Daubert challenges using controlling case law from 2018 through 2024.
Overview

What This Briefing Covers

01 — The CDR Record
What carriers actually log
CDRs capture metadata about a communications event: numbers involved, timestamp, duration, and cell site identifier. They do not capture GPS coordinates, phone content, or a precise location. Understanding the exact data fields is the foundation for challenging or leveraging this evidence.
02 — Tower Architecture
How sectors and azimuths work
Most towers have three sectors, each served by a directional antenna pointing along a specific azimuth. A phone connecting to a sector indicates general directional proximity, not a street address. Coverage areas vary from under one mile in dense urban settings to more than ten miles in rural terrain.
03 — Enhanced Location Data
Timing Advance, PCMD, RTT, and NELOS
Specialized carrier datasets narrow location inference by estimating distance from a tower along an arc within a sector. These records are more granular than standard CDR but are not GPS equivalents. Carriers publish disclaimers about inherent inaccuracies, which are critical for motion practice.
04 — Case Law and Challenges
From Jones (2012) to post-Carpenter lower courts
The Supreme Court's 2018 ruling in Carpenter v. United States fundamentally changed how historical CSLI is obtained. Lower courts continue to refine scope. Daubert challenges targeting CDR expert methodology have produced exclusions and limitations in multiple jurisdictions.
Foundation

What a Call Detail Record Actually Contains

Technical Definition
A call detail record is a data file automatically generated by a cellular carrier's switching infrastructure each time a communications event occurs on its network. It is a carrier business record, not a law enforcement product. It captures metadata about the event, not the content of communications.
FieldWhat It RecordsGPS?
Originating numberPhone number placing the callNo
Terminating numberPhone number receiving the callNo
TimestampDate and time of eventNo
DurationLength of call in secondsNo
Call typeVoice, SMS, data sessionNo
Cell site IDTower and sector identifierNo
Carrier reference fileTower coordinates and azimuthApprox.
Key distinctions for counsel
  • !
    CDRs do not record content. The actual words spoken or text message contents are not part of a CDR. Content requires a wiretap order or warrant under the Wiretap Act.
  • !
    The cell site ID is not a coordinate. It is a carrier-assigned identifier for a tower and sector. Geographic mapping requires a separate carrier cell site reference file.
  • !
    VoIP calls do not generate carrier CDRs. Calls made over Wi-Fi through apps such as WhatsApp, FaceTime, or Signal are not captured in wireless carrier CDR files.
  • !
    Retention varies by carrier and record type. Standard voice CDRs are commonly retained for 18 months to 7 years. Specialized data records may be retained for shorter periods. Subpoena timing is critical.
Tower Architecture

Sectors, Azimuths, and Coverage Areas Explained

A cell tower is an antenna installation that serves a defined geographic area. The vast majority of towers are configured with three directional sector antennas, each covering approximately 120 degrees of arc to achieve full 360-degree coverage around the site.

Azimuth
The compass bearing in degrees toward which a sector antenna is pointed. A sector with azimuth 0 faces due north. A sector with azimuth 120 faces generally southeast. The azimuth defines the center of the antenna's main beam, not the edge of its coverage and not the direction to any connected phone.
Beamwidth
The angular width of the antenna's main signal lobe, measured at the half-power point. A typical sector antenna has a horizontal beamwidth of 65 to 90 degrees. Coverage does not end at the beamwidth boundary; signal propagates beyond it, sometimes significantly, depending on terrain and obstructions.

When a CDR shows a phone connected to sector 2 of a tower with azimuth 240, the record means the phone was somewhere within the general coverage footprint of that sector. It does not place the phone at the tower, or along the azimuth line specifically.

Three-Sector Tower Configuration
TOWER Sector A Azimuth 0° Sector B 120° Sector C 240° N E S W

Arc lines are analytical approximations. Signal extends beyond drawn boundaries.

120°
Typical arc per sector on a 3-sector tower
3+
Miles potential coverage in rural areas
<0.5
Miles typical urban sector radius
Precision Analysis

CDR Is Not GPS: Understanding the Precision Gap

A phone connecting to a cell tower sector does not tell an expert where within that sector the phone was located. The geographic area of a single sector can encompass dozens of square miles. The comparison below illustrates what each evidence type actually provides.

Location precision comparison
GPS (satellite triangulation)2 to 10 meters
Timing Advance / PCMD / RTTHundreds of meters to 1 mile arc
Standard CDR (urban sector)Under 1 square mile
Standard CDR (suburban sector)1 to 5 square miles
Standard CDR (rural sector)10 or more square miles

Bars show relative precision only. Area estimates are representative ranges.

Why phones do not always use the nearest tower
  • 1
    Network load balancing. Carriers distribute traffic across towers to prevent congestion. A phone may be routed to a more distant tower even when a closer one is available.
  • 2
    Signal obstruction. Buildings, terrain, foliage, and weather affect propagation. A geographically closer tower may deliver weaker signal than a more distant one with a clear line of sight.
  • 3
    Multipath propagation. Radio signals reflect off structures. A phone may receive stronger signal from a reflected path to a distant tower than from a direct path to a nearer one.
  • 4
    Handoff timing. During movement, handoffs between towers do not occur instantaneously. A CDR record may reflect the prior tower for seconds after a phone has moved into an adjacent coverage area.
Specialized Records

Enhanced Location Data: Timing Advance, PCMD, RTT, and NELOS

Beyond standard CDR records, carriers may retain specialized measurement data that provides additional location inference. These datasets use signal propagation timing to estimate how far a device is from a tower along an arc within a sector.

Timing Advance (TA)
Distance estimate from tower
Timing Advance is a measurement of the time it takes for a signal to travel from the handset to the base station and back. Because radio wave speed is known, the carrier can calculate approximate distance. TA data narrows location to an arc at a given radius from the tower within a sector, not to a point. Retention and availability vary by carrier and network generation.
PCMD / RTT / Round Trip Delay
Per-call measurement data
Per Call Measurement Data, Real Time Tool data, and Round Trip Delay records are carrier-specific implementations of signal timing measurements. They function similarly to Timing Advance but may capture more granular or more frequent readings. Like TA, these records produce an arc-based estimate within a sector, not a GPS coordinate.
NELOS
Network Event Location System
NELOS is a carrier-specific dataset associated with certain network architectures. It uses network-side measurements to estimate device location. NELOS records tend to be more granular than standard CDR but are subject to the same arc-within-sector limitations. Carrier disclaimers on NELOS accuracy are important exhibits in expert challenges.
Carrier Disclaimers
What carriers themselves say
Carriers providing enhanced location data routinely include documentation stating the data is not equivalent to GPS, is subject to inherent inaccuracies, and should not be used alone to establish precise device location. These disclaimers are admissible and critical for cross-examination of experts who overstate precision.
Key distinction for motion practice: Enhanced location data narrows the area of inference but does not eliminate it. A Timing Advance arc within a sector may still cover multiple blocks or residential areas. Any expert opinion converting an arc into a specific address requires scrutiny of methodology and validated error rate.
Common Misconceptions

Cell Tower Myths vs. Forensic Reality

✕   Commonly Asserted
A CDR showing a tower near a crime scene proves the defendant was at that location.
Phones always connect to the closest tower.
The sector azimuth tells you which direction the phone was from the tower.
Enhanced records like PCMD and NELOS are equivalent to GPS.
No CDR activity during a time window proves a phone was off or at home.
A sector coverage cone drawn on a map shows exactly where the phone could have been.
✓   Forensic Reality
A CDR record places a phone within a sector coverage area that may span multiple neighborhoods. It does not pinpoint an address or confirm physical presence at a specific location.
Tower selection is governed by signal quality, network load balancing, handoff state, and propagation conditions. A phone may connect to a tower miles away while closer towers are available.
The azimuth is the direction the antenna points, not the direction to the phone. A device can be located anywhere within the sector's coverage arc.
Enhanced data narrows inference to an arc within a sector. Carriers explicitly disclaim GPS equivalence in their data production documentation.
CDR records only exist when a device makes or receives a call, text, or data session. Silence in the record does not establish device status or location during that gap.
Sector coverage cones are analytical tools. They are not hard boundaries; significant signal often exists outside the drawn arc, and connection to a distant tower is possible from well within the arc.
Controlling Authority

Key Case Law: CDR and Cell Site Evidence

2012 — SCOTUS
United States v. Jones, 565 U.S. 400 (2012)
The Supreme Court held unanimously that attaching a GPS tracking device to a vehicle and using it to monitor movements constitutes a Fourth Amendment search. Concurring opinions raised the foundational question of whether long-term digital location surveillance violates reasonable expectations of privacy, laying the groundwork for Carpenter six years later. Docket No. 10-1259.
Primary source: Justia →
2018 — SCOTUS (Landmark)
Carpenter v. United States, 585 U.S. 296 (2018)
In a 5-4 decision, Chief Justice Roberts held that the government's acquisition of seven or more days of historical cell site location information constitutes a Fourth Amendment search requiring a warrant supported by probable cause. The court rejected the third-party doctrine as applied to CSLI, holding that cell phone location data chronicles the privacies of life in a way that demands heightened constitutional protection. Docket No. 16-402.
Primary source: Justia →
2020 — State
Commonwealth v. Dunkins, 229 A.3d 622 (Pa. Super. 2020)
The Pennsylvania Superior Court held that network connection records obtained without a warrant did not fall within Carpenter's protection where the records did not comprehensively chronicle the defendant's movements. The case illustrates that lower courts continue to define Carpenter's outer boundaries, with outcomes varying by jurisdiction and the granularity of data sought.
Case record: Casetext →
Practice note: Carpenter's holding is expressly narrow. The Court did not resolve the warrant requirement for real-time CSLI, tower dumps, or records covering fewer than seven days. Lower courts continue to split on these questions. Counsel should assess the specific jurisdiction and record type before relying on Carpenter alone to support suppression. The good-faith exception applies to records obtained before the June 22, 2018 decision date.
Daubert considerations: Under Federal Rule of Evidence 702, CDR expert testimony must be based on sufficient facts, reliable methodology, and a reliable application of that methodology to the facts. Courts have granted Daubert hearings specifically to examine whether experts' sector coverage methods have validated error rates, whether they assumed nearest-tower connection, and whether field testing was conducted.
Cross-Examination Guide

Five Expert Testimony Errors to Challenge at Daubert or Trial

The following errors appear across Daubert hearings in multiple federal jurisdictions and are the most productive targets for challenge whether you are seeking to exclude, limit, or counter the opposing expert.

  • !
    Conflating sector coverage with precise location. Testimony that a phone was at a specific address because it connected to a nearby sector misrepresents what CDR evidence can establish. The sector coverage area must be defined and presented, not collapsed to a point.
  • !
    Assuming nearest-tower connection. Experts who assert a phone connects to the nearest tower ignore load balancing, signal propagation physics, and carrier network engineering. This assumption has no validated basis in telecommunications engineering literature.
  • !
    Misreading azimuth as direction to the device. The azimuth is the direction the antenna points. It is not a bearing to the phone. An expert who testifies a phone was in a particular direction from the tower based solely on azimuth has misapplied the data.
  • !
    Presenting sector cones as hard boundaries. The drawn arc on a map is an analytical approximation at the half-power point. Signal extends beyond the drawn line. Presenting the arc as a definitive boundary overstates precision and ignores documented signal propagation variability.
  • !
    Failing to perform radio frequency drive testing. SWGDE guidelines for cell site analysis recommend that experts conduct RF drive testing in the relevant area to validate coverage assumptions. Experts who produce sector maps without physical verification should be required to disclose this limitation.
Attorney Action Plan

Pre-Trial CDR and Cell Site Evidence Checklist

  • 01
    Subpoena the right records early. Request CDR, specialized location data (PCMD, RTT, TA, NELOS), and the cell site reference file listing coordinates and antenna parameters for all towers in the relevant area. Retention windows vary. Engage a forensic expert to draft subpoena language before filing.
  • 02
    Verify the cell site reference file. The carrier CDR identifies towers by an internal ID. The reference file maps those IDs to geographic coordinates and antenna parameters including azimuth and beamwidth. Verify it matches the production date of the CDR, as tower configurations change over time.
  • 03
    File a Carpenter motion for warrantless CSLI. If the government obtained seven or more days of historical CSLI without a warrant, a suppression motion under Carpenter is indicated. Assess whether the good-faith exception applies based on when the records were obtained relative to June 22, 2018.
  • 04
    Request a Daubert hearing on the opposing expert. Demand production of the expert's methodology, software tools used for coverage mapping, whether RF drive testing was performed, and the validated error rate for their location conclusions. Carrier disclaimers from the data production package are supporting exhibits.
  • 05
    Retain a qualified counter-expert. A certified CDR and cell site analysis expert can independently map tower coverage, identify whether sector cones are drawn accurately, review load balancing data, and assess whether the connection pattern is consistent with the opposing narrative.
  • 06
    Cross-examine on nearest-tower assumption. Ask the opposing expert specifically whether they assumed nearest-tower connection, what documentation they have for carrier load balancing at the relevant time, and whether they performed on-site RF testing to validate their coverage model.
Post-conviction and appellate note: CDR and cell site analysis have supported successful post-conviction petitions in cases where the original trial lacked a qualified defense expert. Courts have granted evidentiary hearings where new expert analysis demonstrates the government's original tower testimony overstated the location evidence. Preserve this issue at trial through motions in limine and a standing objection to lay or unqualified expert CDR testimony.
Next Step
Submit Your Evidence Question

If cell tower or CDR evidence is at issue in your case, a certified forensic examiner can review the records, assess the opposing expert's methodology, and produce a court-admissible analysis. Initial consultations are confidential.

CFCE • EnCE • CCME • CCST • CNFA • 24 years of experience • Nationwide
Prefer to call? (833) 292.3733

Save this explainer as a PDF

Enter your email to unlock the Print to PDF button. We will also send you new explainers when published, no more than twice a month.

Elite Digital Forensics does not sell or share attorney contact information.
Attorney FAQ

Common questions about CDR analysis and cell tower mapping

These questions come from defense and civil attorneys reviewing CDR and cell site evidence. Answers reflect current case law and forensic standards as of June 2026.

A call detail record (CDR) is a data file generated by a cellular carrier documenting the metadata of a communications event. It typically includes the originating and receiving phone numbers, date and time, call duration, call type, and identifiers for the cell site that served the device. CDRs do not contain the content of communications. They are produced automatically by carrier infrastructure for billing and network management and are retained under carrier-specific policies, typically ranging from one to seven years depending on the carrier and record type.

CDR records identify which cell tower sector handled a communications event. That sector covers a geographic area that may range from under one square mile in dense urban environments to over ten square miles in rural or suburban areas. The record tells you a phone was within the coverage footprint of a sector, not where within that sector it was located. GPS uses satellite triangulation to pinpoint coordinates within meters. CDR and cell site location information are area indicators, not coordinate systems, and should never be presented to a jury as equivalent in precision to GPS data.

A cell tower sector is a directional slice of radio coverage served by one antenna on the tower. Most towers have three sectors, each covering roughly 120 degrees of arc, together forming 360-degree coverage. The azimuth is the compass bearing toward which the antenna faces, not the direction to any connected device. A sector with an azimuth of 0 degrees faces north. When a phone connects to a sector, the connection indicates the device was somewhere within the general coverage arc of that antenna, which can encompass multiple neighborhoods or square miles depending on environment.

No. A CDR record shows that a phone connected to a particular tower sector during a communications event. The coverage area of that sector may encompass multiple neighborhoods, roadways, or geographic zones. Additionally, phones do not always connect to the nearest tower: signal load balancing, physical obstructions, multipath propagation, and network conditions can cause a device to connect to a more distant tower. An expert must account for all of these variables and ideally conduct radio frequency drive testing before drawing location inferences from CDR data.

In Carpenter v. United States, 585 U.S. 296 (2018), the Supreme Court held in a 5-4 decision that the government's acquisition of seven or more days of historical cell site location information constitutes a Fourth Amendment search requiring a warrant supported by probable cause. The court rejected the third-party doctrine as a basis for warrantless access to CSLI held by carriers. The ruling applies to historical CSLI and has been applied and refined by lower courts to related location data types. The good-faith exception may apply to records obtained before June 22, 2018.

Carriers may retain specialized measurement data under designations including Timing Advance, Per Call Measurement Data (PCMD), Real Time Tool (RTT), Round Trip Delay, and Network Event Location System (NELOS) records. These datasets use signal propagation timing to estimate a device's distance from a tower along an arc within a sector. However, carriers themselves publish disclaimers stating that this data is not equivalent to historical GPS and carries inherent inaccuracies. Availability and retention periods vary significantly by carrier and network generation.

CDR and cell site records are obtained from carriers by subpoena, or where constitutionally required under Carpenter, by search warrant. The subpoena should specify the phone number, date range, and each specific record type sought, including voice CDR, SMS records, data connection records, specialized location measurement data (PCMD, RTT, TA), and the cell site reference file listing tower coordinates and antenna parameters. Early engagement of a forensic expert to draft precise subpoena language helps ensure all relevant data classes are captured before carrier retention windows expire.

Common methodological errors in CDR expert testimony include: overstating the precision of tower connections as placing a phone at a specific address; assuming without validation that phones always connect to the nearest tower; misidentifying azimuth direction as the bearing to the device rather than the direction the antenna faces; presenting sector coverage cones as hard geographic boundaries rather than probabilistic approximations; and failing to conduct radio frequency drive testing to validate coverage assumptions. Attorneys should ask experts about each of these issues during Daubert hearings and cross-examination.

Elite Digital Forensics  •  Digital Evidence Explainer Series  •  elitedigitalforensics.com  •  This explainer is for educational purposes and does not constitute legal advice.  •  Last updated June 2026.

Assistant Icon Elite Digital Forensics Assistant
πŸ‘‹ Live Chat Now!
Free Virtual Consultation 24/7
Chat Now!

By submitting this form, you consent to be contacted by email, text, or phone. Your information is kept secure and confidential. Reply Stop to opt out at anytime.Β 

IMPORTANT: Please remember to check your spam or junk folder