Record format and parser review
IPDR field mapping by approved source type, including available IP, port and timestamp fields.
Examine authorized IP Detail Records with attention to time, port, identifiers and operator-specific formats. Network records support leads that require careful interpretation.
Review the actual operator data dictionary and tested release before describing support for each correlation type.
IPDR field mapping by approved source type, including available IP, port and timestamp fields.
Consistent time-base checks, timezone assumptions and precision warnings.
Filter and group authorized connection records where identifiable fields are present.
Connect network activity with other authorized records subject to data completeness.
Shared addresses and port allocation complicate subscriber attribution and must not be treated as definitive identity.
Reference source files, normalized fields, filters and analyst review notes.
An IP address, especially behind NAT or CGNAT, is not by itself proof of a specific person or device. Timezones, clock offsets, ports and provider logs all matter.
Product capability information: This page describes the CyberSaathi analysis suite and its evaluation scope. Individual modules, format compatibility, integrations, deployment editions and licensing must be confirmed against the tested release for your organization. Illustrations and sample reports are not production evidence.
Request a demonstration with sample data, exact software release, deployment requirements, data types and configuration needs.