// industry vertical
satellite / GNSS / LEO terminal forensics
Starlink · Iridium · Inmarsat · Globalstar terminal logs · GNSS spoofing/jamming artifacts · LEO handover traces · ground-station access — when comms evidence comes from satcom exports, not cellular PCAP.
start here · primary tools
ordered. work top-down. the first tool is the suggested entry point for this vertical.
- starlink terminal telemetry forensic analyzerdrop starlink app/dish telemetry export · parse uptime + obstruction + beam switches · runs locally
- gnss spoofing jamming artifact detectordrop gnss receiver debug log · detect clock jumps + constellation drops + rf anomalies · runs locally
- iridium sbd short burst data forensic analyzerdrop iridium sbd mo/mt message export · parse imei + payload hex + delivery status · runs locally
- case report generatorfill in case number · examiner · dates · findings · drop evidence files for auto hash · generates structured forensic report PDF · runs locally
also useful · secondary tools
cross-cutting tools that surface depending on the specific investigation.
- gps almanac ephemeris tamper detectordrop gps almanac/ephemeris cache export · detect stale or injected nav data · runs locally
- leo satellite handover session log analyzerdrop leo terminal handover trace · parse satellite id switches + latency spikes · runs locally
- satcom ip backhaul traffic forensic analyzerdrop satcom ip flow export · parse natted sessions + quota + link type metadata · runs locally
- adsb spoofing detection from receiverdrop ads-b receiver data + flight database · detect spoofed targets · runs locally
- evidence manifest generatordrop evidence files · compute md5 sha1 sha256 · chain of custody manifest · case number · analyst · export pdf and csv · runs locally
want deeper satellite coverage?
this vertical is intentionally sparse — deep-moat coverage grows over time. tracked in the forensics rollout.