Rev.

20201030

Turning Research Into Reality... Inspired Innova on Delivered...

Kestrel TSCM ® Professional So ware

Professional TSCM Services and Training...

EXCLUSIVE Distributor USA, North & South America

For Sales Inquiries, Contact: ComSec LLC

4525 South Boulevard, Suite 302, Virginia Beach, VA 23452
Phone/Fax: 800-615-0392 Email: [email protected] | Web: comsecllc.com/product/kestrel-tscm-pro-software/
Advancing the Art and Science of Technical Security
The compe on tells its poten al customers that the
problem with the Kestrel TSCM ® Professional So ware, is
that it captures too many signals — Inexplicably Ironic!
Honestly, We Deliberately Made it Be er...
Kestrel ® is a highly evolved TSCM | SIGINT | ELINT specific, operator centric
SDR applica on, and we make no apologies for the advanced capability of our
industry disrup ve, standards‐based capability, mee ng new and evolving
challenges of technical operators, working within the private sector, corporate
sector, regulatory authority, law‐enforcement, government, military, special
forces, and the na onal security apparatus, who are faced with a modern
moving target threat model, in comba ng the insidious and growing threat of
cyber‐espionage, terrorism, and the devasta ng financial damage and lost
business opportuni es caused by state sponsored economic‐espionage.
End‐User Expecta ons — Delivered!
The Kestrel TSCM ® Professional So ware is not a simplis c desktop spectrum
The Kestrel TSCM ® Professional So ware
analyzer, offering limited capability, but rather, is a highly deployable, mission delivers excep onal value, without the
scalable, travel friendly, full featured TSCM focused product for professionals. need to compromise on features and
func onality. Kestrel ® is the product of
Kestrel TSCM ® Professional So ware engages and brings the professional years of opera onal field experience in
technical operator back into the equa on, with innova ve and many advanced delivering real‐world defensive Technical
Surveillance Countermeasures (TSCM) at
never before seen, standard included and op onal features and func onality.
all opera onal threat levels. Kestrel's
Kestrel TSCM ® is mission adaptable, scalable, upgradable, and well‐posi oned unique approach to developing, not only
the most technologically advanced TSCM
to generate the opportunity for new and recurring revenue streams, while
so ware available, but also, changing a
exponen ally improving real‐world Probability of Intercept (POI) and complacent and outdated deployment
Probability of Detec on (POD) for the end‐user, by embracing a modern moving methodology has revolu onized the
target threat model, as defined under the TSB 2000 (Technical) Standard TM. technical security industry worldwide. The
Kestrel TSCM ® Professional So ware is
The technical operator; not the equipment manufacturers are now defining and always considered a work in progress,
with room for improvement and PDTG's
redefining field deployment capability and the modern SDR resources that are
so ware engineering, development and
decidedly founded on an en rely new professional service methodology! Technical Research and Standards Group
(TRSG) TM, con nue to work on en rely
It is the experience and real‐world needs of professional technical operators
new, modern, operator centric, features
like you that con nue to drive the success and the future of the Kestrel TSCM ® and func onality. We encourage you to
Professional So ware, from a new development prospec ve. join the Kestrel ® revolu on, and
compare the many benefits of making the
Perhaps your innova ve So ware Defined Radio (SDR) idea or feature will be Kestrel TSCM ® Professional So ware part
added to the next official release of the Kestrel TSCM ® Professional So ware! of your primary deployment kit. 

Paul D Turner, TSS TSI If you would like addi onal informa on about
Kestrel ® , or have technical ques ons, please
contact [email protected] for informa on.
 Kestrel TSCM ® Professional So ware | Innova on is Simply the Beginning

Normal Real‐Time | WFD

Time Compressed | WFD

Kestrel ® Time Compression (1/n=50) | Brings Spectral Clarity to an En rely New Sophis ca on
and Simplifies the Analy cal Process with Kestrel Super Trace (KST) TM Technology.

Kestrel TSCM ® User Interface (UI)

Our ergonometric user‐interface promotes
Kestrel ® Demodula on and Visualiza on
Demodulate and record AM, FM and SSB audio,
operator situa onal awareness by grouping and FFT displays include the RF Spectrum, Spectral
Professional So ware dynamically linking essen al control elements in Density, IQ Diagram, IQ Vs Time, RSSI History,
combina on with intelligent automa on. Analog RSSI, Audio Oscilloscope, AF Spectrum
RF Spectrum Display (RSD) and NTSC Video decoding and visualiza on.
Signals Intelligence Support Threat Detec on Algorithm (TDA)
Mul ple tabbed spectrum windows permit any
System (SISS) TM number of frequency Ranges of Interest (ROI), or Detec on modes include, Minimum Detec on
band alloca ons to be captured in parallel. Amplitude (MDA) TM, Harmonic Signature
The Kestrel TSCM ® Professional So ware Waterfall Display (WFD) Threshold (HST) TM, and an analog audio
leverages advanced So ware Defined Radio (SDR) Our Waterfall Display (WFD) in combina on with transmi er Chirp Threat Mode (CTM) TM.
concepts to deliver proven, industry leading, automa c spectra recording capability, enables Loca on Differen al Signal Analysis (LDSA) TM
standalone RF Remote Spectrum Surveillance and historical signal events to be reviewed with our A graphical LDSA TM model permits the import of
Posi onal Zoom and Zoom‐to‐Peak features. floor plans, ver cal risers, geographical maps,
Monitoring (RSSM) TM, collec on and analysis
Live View Analysis (LVA) TM 3D rendering and photographs for direct
func onality. Work‐flow oriented features compara ve analysis of all collected data.
Real‐ me analysis of con nuous and periodic
tailored to professional TSCM applica ons are signal events, is supported without the need to Time Differen al Signal Analysis (TDSA) TM
integrated into an intui ve operator centric user interrupt the run me data collec on process. Our TDSA TM feature provides the capability to
interface and contributes to a high standard of Ar ficial Intelligence (AI) generate operator defined DSA TM traces, based
usability. With its extensive func onality the Our Threat Detec on Algorithm (TDA), and on run me or post review, of operator defined
me blocks, for direct me period compara ve
Kestrel TSCM ® Professional So ware is the Signal Combining Technology (SCT) TM detects
and characterizes, wide bandwidth signals. analysis filtering.
ul mate future‐proof Radio‐Frequency (RF)
Spectrum Baseline Logging (SBL) TM Session Report Generator (SRG) TM
sensing solu on for a wide range of applica ons.
The operator can quickly capture a baseline peak Our integrated report generator, and project
Our Technical Research and Standards Group management structure, provides unprecedented
trace reference, and corresponding signal list.
(TRSG) TM con nues to develop unique innova ve sophis ca on in repor ng your findings.
Automa c Export Control (AEC) TM | OPT AEC
products and new deployment methods. The Advanced Report Generator (ARG) TM
AEC provides programmable CSV exports and
Kestrel ® so ware is developed in Canada and adds triggered IQ recording capability. Our ARG TM is the comprehensive standards
supports a wide range and level of professional based report management resource that allows
Dynamic Alert Annunciator (DAA) TM
all aspects of the mission or assignment to be
receivers and spectrum analyzers, and is available The DAA TM feature provides unlimited user combined into a single automa cally structured
to technical security professionals worldwide.  defined independent alert trigger zones. and professionally forma ed report document.
02 | Key Features
User Interface (UI)

An intui ve, user‐friendly, work‐flow based,

operator centric user‐interface , places all
essen al, commonly used display and control
groups up‐front. Dynamic control linking, the
use of Ar ficial Intelligence (AI) and predic ve
logic, op mize se ngs that remain under the
full control of the operator during collec on,
review and analysis. 

Spectrum Display Ac vity | Control Group

The operator can setup, navigate, view and

analyze, mul ple instances of independent
spectrum and waterfall data sets, in a familiar
tabbed window format. Various global and
independent preferences are supported,
improving operator situa onal awareness. 

Automa c Threat List (ATL) TM

Two primary levels of threat list integra on

and genera on, work intui vely to provide
advanced dynamic Posi onal Zoom Control
(PZC) TM, and discrete signal demodula on
ability. The sidebar ATL provides immediate
access to discrete signal events captured, and
displays the frequency (MHz) and signal level
(dBm). The Master ATL TM provides addi onal
signal parameters including iden fied harmonic
rela onships, frequency (MHz), signal level
(dBm), es mated bandwidth, date and me of
collec on and loca on details. The operator can Automa c Receiver and Spectrum Analyzer Iden fica on | Configura on
add “iden ty” and “notes” rela ng to discrete
All supported and connected receivers and spectrum analyzers are automa cally detected and
signal events. Signals are placed on a uniquely
ini alized during the Kestrel ® applica on start‐up process. User definable configura on se ngs
color coded tabbed window, and duplicated on
enable spectrum (sweep), demodula on, and analysis (threat detec on) func ons to be
the Master ATL TM automa cally. Our “Drag and
independently programmed at the radio level when mul ple radios are present. 
Drop” technology allows any detected signal to
be demodulated, or dropped onto the spectrum Kestrel ® Super Trace (KST) TM
display, to immediately invoke a 20x zoom focus
Support for me compressed spectra and waterfall trace data, provide unsurpassed clarity within the
on the Signal of Interest (SOI). The operator can
analy cal process. Time compression is an advanced feature that permits the operator to write a
enter a high resolu on zoom up to 200x
single KST TM consis ng of the combined peak data captured from any number of standard traces. 
manually using the mouse. 
Kestrel TSCM ® Professional So ware | IF Broadband (IFB) Mode TM
TM
Live View Analysis (LVA)
During tradi onal sweep opera on, it is necessary to interrupt the run me collec on process to
Real‐ me analysis of discrete spectral events is
accommodate demodula on and signal analysis, for features such as the Automa c Export Control
supported without the need to interrupt the
(AEC), and Triggered IQ recording capability. Our IFB TM mode, permits the maximum real‐ me
run me collec on process, giving the operator
receiver, or spectrum analyzer IF bandwidth, down to the discrete signal level to be captured,
the ability to instantly review historical trace
recorded, processed and analyzed in | IF | mode. The Kestrel ® IFB TM feature operates in a modified
data (on a trace by trace basis), directly on the
zero span run me demodula on mode. This permits, the ability to capture pre‐event buffering
RSD and WFD display, during run me, or during
associated with the triggered IQ capability. The normal sweep mode must be stopped to
off‐line post event analysis and review, when
accommodate demodula on, resul ng in a short mode change delay of up to 220 mSec (BB60C), or
working with a historical Kestrel Project File
about 17 mSec (SM200B). Pre‐event buffering is not available, without our IFB TM mode enabled. 
(KPF) TM. 

Kestrel TSCM ® Professional So ware | Well Posi oned to Hunt in a Complex Signal Environment
03 | Key Features
Mul ple Receiver Opera on (MRO) TM
TDSA (5 MINUTE) WFD PLOT
Single Receiver Opera on (SRO) TM, Dual
Receiver Opera on (DRO) TM, and Mul ple
Receiver Opera on (MRO) TM, are all supported
with “on‐the‐fly” dynamic (spectrum and
demodula on) “hand‐off” between any number
and type, of supported SDR receivers and
spectrum analyzers. 
TDSA TIME BLOCK (TRACE) COMPARATIVE
Professional SDR Radio Hardware Support

Kestrel Support Profiles (KSP) TM are available

for a wide range of entry level and professional
search receivers and spectrum analyzers, for
TSCM, SIGINT, and Remote Spectrum
Surveillance and Monitoring (RSSM) TM
requirements and applica ons. 

Mul ple Spectral Windows

The ability of the operator to display, search

and analyze any number of independent
spectral range windows, is supported. Mul ple
independent search Ranges of Interest (ROI) can
be accessed on a single monitor via a familiar
tabbed window interface, or moved to a
second, or third display monitor. The ability
to select and view any por on of a currently
displayed ROI, and open a new sub‐band
window, is supported. The Kestrel ® SOLO Time Differen al Signal Analysis (TDSA) TM
priority mode, allows the technical operator to TDSA TM allows the technical operator to deploy the so ware for extended periods of me, in a
assign real‐ me priority to any single tabbed Remote Spectrum Surveillance and Monitoring (RSSM) TM role, and generate a series of fixed,
window, and immediately zoom on any discrete operator defined me blocks, captured in real‐ me within a run me environment (recommended),
run me Signal of Interest (SOI).  or applied as a post analy cal analysis tool, for a detailed me based Differen al Signal Analysis
Posi onal Zoom Control (PZC) TM (DSA) TM, across hours, days, weeks, or months of complex spectra, captured from a single collec on
loca on. TDSA TM is a very powerful capability deigned as an adap ve me block, based filter that
The operator can u lize the mouse wheel to is under full control of the professional technical operator. During post analysis specific operator
focus and direct the desired zoom level on the defined data and me block periods can be generated, permi ng a narrow more focused analy cal
spectral display. The operator may also navigate me review of the spectra and waterfall data. 
within the Posi onal Zoom Control (PZC) TM
window. A double mouse click ac vates a 20x Global Posi oning System (GPS) | Receiver Support
and 100x zoom factor. A right mouse click The Kestrel TSCM ® Professional So ware provides advanced support for USB based GPS receiver
allows the operator to select from a menu list of hardware, and permits the capture of the la tude and longitude coordinates for DSA antenna
dynamic zoom op ons based on the current CF loca ons, in support of Geographical Area Reviews (GAR), RF Direc on Finding, Search and Rescue
and ROI displayed. A mouse based 200x high (SAR) assignments, and wireless survey work. Geographical coordinates can also be entered
resolu on zoom capability is also supported. manually when a GPS signal is not available, such as when working indoors, or underground. GPS
“Drag and Drop” from the Automa c Threat coordinates are u lized for plo ng FCC and IC frequency database reference mapping. 
List (ATL) focuses the SOI at CF with a 20x zoom
Mul ple Receiver “Hand‐Off” Capability
factor. The CF, SPAN, START and STOP
frequency can be set manually from the Synchronized, dynamic “hand‐off” is available across all supported search receivers and spectrum
naviga onal control group. See Horizontal analyzer types, regardless of manufacturer, or connec vity method. Seamlessly “hand‐off” both
Range Control (HRC) TM for further op ons.  the spectrum and demodula on func ons, to any connected receiver in real‐ me. Operator defined
programming supports, independent sweep, demodula on, and analyze mode configura on,
“Specifica ons Subject to Change without no ce…” within the Analyzer Control dialog window. 

Kestrel TSCM ® Professional So ware | Advancing the Art and Science of Technical Security
04 | Key Features
Loca on Differen al Signal Analysis (LDSA) TM

LDSA TM can be u lized in several opera onal

modes depending on deployment parameters.
Sta c and Echo LDSA TM modes allow the
operator to collect compara ve traces from any
number of target area loca ons and overlay the
trace data. Unlike standard spectrum analyzer
trace math, Kestrel ® supports MDA TM , CTM TM
and HST TM spectral marker flag integra on,
adding an important analy cal layer that
enhances the Probability of Detec on (POD),
and ability to iden fy hos le signal events. 

Live View LDSA (LVD) TM

LVD TM enables the operator to review specific

antenna loca on, compara ve traces without
interrup ng the collec on of LDSA TM trace data
in the background. It can be used during ac ve
LDSA TM trace collec on, or during post event
analysis. Full display func onality, including the
Export | Operator Defined (CSV) Spectra
Posi onal Zoom Control (PZC) TM and all display
parameters are preserved. When LDSA TM The ability to manually define and export Spectra data to | CSV | format is supported, based on
Compara ve and Peak ECHO Mode TM are both operator defined parameters, including the | LOCATION |, | BAND |, | START / STOP TRACE INDEX |,
ac ve, real‐ me Differen al Signal Analysis and | START / STOP FREQUENCY |. Exported | CSV | files can be u lized in third‐party produc vity
(LDSA) TM is dynamically displayed.  so ware to generate graphical representa ons of the original Spectra. 

Trace Math Analysis (TMA) TM Export | Run me Triggered (CSV) Spectra and RSSI

The ability of the technical operator to display a U lizing the Dynamic Alert Annunciator (DAA) TM both | SPECTRA | and | RSSI | values can be
differen al trace comparison for any two operator programmed to automa cally export | CSV | values on the detec on of | SIGNAL
antenna loca ons, is supported. The DSA TM EXCEEDANCE | and / or | SIGNAL LOSS | events within the same alert zone. The Kestrel TSCM ®
window supports (A ‐ B) or (B ‐ A) comparison Professional So ware supports unlimited operator defined alert zones, which can be exported to
modes for DSA TM antenna loca ons. The | CSV | format and moved to another Kestrel ® system, or imported into a new, or another exis ng
operator can “Drag and Drop” any two loca ons historical Kestrel Project File (KPF) TM. 
to the docking sta on to display a dedicated
Automa c Export Control (AEC) TM | OPT AEC
differen al trace. 
Our op onal AEC TM module adds an important dimension for long term, Remote spectrum
Mul ple Display Monitors
Surveillance and Monitoring (RSSM) TM deployment, by automa ng the export process of | TIME
The operator can open and display, any number PERIODIC | and | TRIGGERED | spectral events to | CSV | file format. The AEC TM capability also
of independent spectral windows, across supports automa c | TRIGGERED IQ | export, across Single Receiver Opera on (SRO) TM, and Dual
mul ple receivers, and dynamically drag the Receiver Opera on (DRO) TM configura ons. OPT AEC TM is required to u lize the automa c
windows to a separate display monitor, or view | TRIGGERED IQ | sample recording feature. 
separate “hand‐off” receivers on any available
Command Line Programming (CLP) TM | OPT CLP
display monitor at, or above 1280 x 800. 
Our op onal CLP TM module adds the ability to ini ate triggered audio (sound) aler ng across all
Rapid Deployment Kit (RDK)
exis ng detec on modes. The ability to define system level ac ons, permits the use of addi onal
The en re Kestrel TSCM ® Professional external resources, including so ware programs, ECM command and control, IQ recorders and
So ware | Signal Intelligence Support System analyzers, and any number of hand‐off and demodula on requirements. The ability to render
(SISS) TM can be pre‐configured, and delivered in operator defined network level alerts via email and SMS are fully supported. The CLP TM module is
a standard transit hard case, or carried in a integrated with the Dynamic Alert Anounciator (DAA) TM and all other threat detec on triggers. 
standard laptop bag. 

“Specifica ons Subject to Change without no ce…”

Kestrel TSCM ® Professional So ware | Well Posi oned to Hunt in a Complex Signal Environment
05 | Key Features
TSCM | SIGINT Deployment Considera ons

TSCM focussed RF spectrum analysis requires

innova ve equipment resources, and perhaps
more importantly, a comprehensive framework
for applying the advanced procedures and
deployment techniques needed, to meet a
modern day, moving target threat model. 

Floor Plan (Import)

The ability to import | PNG |, | JPG |, or | GIF |

images of the target area, or a facility floor plan,
is supported in the Kestrel TSCM ® Professional
So ware. Differen al Signal Analysis (DSA) TM is
a feature, integrated with antenna loca on
spectral data collec on points, and is graphically
represented on the imported floor plan u lizing
Kestrel ® “Drag and Drop” technology. 

Ver cal Riser Plot (Import)

Support for the import of ver cal riser plots

allow the operator to u lize the DSA TM
func onality to capture and display collected
spectrum data from mul ple levels or floors of
the target area, adding another dimension of The ability to
compara ve analysis.  import a 3D
Geographical Area Map (Import) graphical facility
visualiza on
RF surveys and TSB 2000 (Technical) Standard TM rendering, adds
based Geographical Area Reviews (GAR) TM are an en rely new
easily accomplished by impor ng any suitable dimension, which
map or chart, and deploying the DSA TM feature significantly
from a mobile collec on pla orm such as a enhances operator
vehicle, aircra or marine vessel. It is possible situa onal
to deploy the so ware u lizing a series of fixed awareness when
sta on, collec on points, or even data from any working protec ve
number of non‐related, co‐located loca ons.  assignments that
Photo Realis c | Virtual Reality (Import) require an element
of real‐ me facility
Our photo realis c virtual reality feature allows
monitoring.
the operator to import actual target area, or
facility level photographs, and overlay DSA TM
antenna loca on data, directly on the image.
This provides excellent situa onal awareness
during Remote Spectrum Surveillance and
Monitoring (RSSM) TM assignments. 

Import Historical Compara ve Bands

The operator can import compara ve spectrum

trace data from any previously captured
historical Kestrel Project File (KPF) TM. 

“Specifica ons Subject to Change without no ce…”

Kestrel TSCM ® Professional So ware | Advancing the Art and Science of Technical Security
06 | Key Features
Award Winning | Industry Leading So ware Kestrel TSCM ® Professional So ware | New Technology = New Terminology!

The Kestrel TSCM ® Professional So ware, is New technology requires new terminology, and operators will soon become familiar with, and
the first in its class to provide “on‐the‐fly” recognize, the level of sophis cated simplicity, workflow integra on, and the wide ranging
mul ple receiver “hand‐off” of the spectrum deployment benefits of our Automa c Threat List (ATL) TM, Posi onal Zoom Control (PZC) TM, Live
and demodulated signal events to all other View Analysis (LVA) TM, Live View LDSA TM, Loca on Differen al Signal Analysis (LDSA) TM, Time
supported and connected SDR search receivers Differen al Signal Analysis (TDSA) TM, Receiver Differen al Signal Analysis (RDSA) TM, Spectrum
and spectrum analyzers.  Baseline Logging (SBL) TM, Chirp Threat Mode (CTM) TM, Harmonic Signature Threshold (HST) TM,
Minimum Detec on Amplitude (MDA) TM, Signal Combining Technology (SCT) TM, Threat Detec on
Award Winning | So ware Defined Radio
Algorithm (TDA) TM, RF Spectrum Display (RSD), Waterfall Display (WFD), Dynamic Alert Annunciator
(SDR) Design Excellence
(DAA) TM, Kestrel Graphical Mapping (KDM) TM, Harmonic Calculator Tool (HCT) TM, Image Capture
The Kestrel TSCM ® Professional So ware is the Tool (ICT) TM, Demodula on, FFT Visualiza on, Spectra and RRSI export, Automa c Export Control
recipient of numerous awards including the (AEC) TM, Command Line Programming (CLP) TM, Autonomous Measurement and Collec on System
CTSC 2013 and CTSC 2014 So ware Defined (AMCS) TM, IF Broadband (IFB) TM, Geo‐Loca on Heat Mapping Display (HMD) TM, RF Visualizer (RFV)
Radio (SDR), Innova on, Research and TM
, and other innova ve features and func onality, with new features in each so ware release. 
Development Excellence award. The Kestrel
Key Deployment Benefits
TSCM ® Professional So ware received the
2013 Glenn H. Whidden Award for the “Best The combina on of the Kestrel TSCM ® Professional So ware, and an applica on specific SDR search
New TSCM Product”, at the Espionage Research receiver or spectrum analyzer, becomes part of a modern, TSCM op mized, work‐flow oriented,
Ins tute Interna onal (ERII) Counterespionage Signal Intelligence Support System (SISS) TM. Our cost‐effec ve state‐of‐the‐art RF collec on and
Conference in Washington DC.  analysis technology approach, provides a comprehensive suite of TSCM focused capabili es:

Technical Operator Centric Design  Powerful signal detec on, collec on and analysis;
 Demodula on and FFT visualiza on;
Designed from the outset to support Mul ple
 Operator assisted, real‐ me deployment and analysis ready;
Receiver Opera on (MRO) TM, the Kestrel
TSCM ® Professional So ware enables the  Una ended and real‐ me, Remote Spectrum Surveillance and Monitoring (RSSM) TM;
operator to exploit the full poten al of any  Automa c real‐ me project file write and save process of all captured data;
number and combina on of supported  Fail‐safe defensive code integra on and project recovery;
receivers and analyzers. Using independent  A fully integrated Session Report Generator (SRG) TM;
tabbed windows, the operator can sweep any  Industry unique Advanced Report Generator (ARG) TM. 
number of independent (ac ve or standby)
spectrum band alloca ons, or custom frequency
Ranges of Interest (ROI), across any number of
receivers. The ability of the operator to “hand‐
off” spectrum band alloca ons “on‐the‐fly”,
facilitates uninterrupted dynamic “hand‐off”
to another connected device. Our dynamic
“hand‐off”, dynamic synchroniza on, provides
instantaneous connec vity, without data loss Na onal Security Oriented (TSCM | SIGINT) Proven Experience
during the “hand‐off” process. 
Our so ware was conceived, and developed in Canada by TSCM professionals with 38 years of
opera onal field experience in delivering TSEC / TSCM professional services at all opera onal threat
levels. The all‐encompassing experience of PDTG's company principals, forms the basis of the TSB
2000 (Technical) Standard TM and the TSCM Opera onal Standard | Policy and Procedure Guideline
(OS‐PPG) TM. The So ware Development Group (SDG) TM, in conjunc on with the Technical Research
and Standards Group (TRSG) TM, have applied a common‐sense and balanced approach centered on
the TSB 2000 (Technical) Standard TM for designing and assimila ng complex algorithms, Ar ficial
Intelligence (AI) and Digital Signal Processing (DSP) technologies. This knowledge and experience is
reflected in the successful development of an RF detec on, collec on, surveillance, and monitoring
system that is both powerful and easy to use by operators at any experience level. The Kestrel
TSCM ® Professional So ware is suitable for TSCM deployment at all known and developing threat
levels, and is currently sold in 29 countries worldwide, and is extensively u lized by the private
sector, and na onal security apparatus, to replace obsolete equipment and methodologies. 

Kestrel TSCM ® Professional So ware | Well Posi oned to Hunt in a Complex Signal Environment
07 | Key Features
Advanced Signals Intelligence Database (ASID)

The ability to search our proprietary Frequency

Database (FDB) TM files, either geographically by
radius distance, expressed in Nau cal Miles Run me Spectrum | Waterfall Display
(NM), and referenced to the current collec on
DSA TM antenna loca on, or by Free Space
Propaga on (FSP) TM for signal level (or both), is
supported. It is possible to view FSP TM data
(rela ve power levels) as a graphical overlay,
directly on the UI during real‐ me collec on, FDB Overlay | Free Space Power (FSP) Display
and during post analysis of historical Kestrel
Project Files (KPF) TM. The “FDB Entry” dialog
window displays the bearing and distance to
and from the sta on, Free Space Power (FSP) TM
power level, and provides the operator with the
ability to directly export, and display the “FDB
Entry” on Google Maps, Satellite, and Street
View imaging. The ability to display, and save a
rela ve sta c overview map showing both the
emi er site and reference collec on loca on is
supported. 

FCC | IC | Frequency Database (FDB)

The Kestrel TSCM ® Professional So ware

includes an Advanced Signals Intelligence
Database (ASID) TM that encompasses a number FDB Signal of Interest (SOI) Map View
of essen al component features, such as the
Frequency Database (FDB) TM, and Operator
Signal List (OSL) TM. The technical operator has Collec on Loca on
the ability to overlay official Industry Canada
(IC) and Federal Communica on Commission
Signal of Interest (SOI)
(FCC) licensing data directly on the UI,
Street View
providing an excellent visualiza on of
spectrum alloca ons for the geographical region FDB Signal of Interest (SOI) Satellite View Posi onal Rela ve View
of interest, which can be as large as North
America, country wide, or as specific as a
region, or frequency range. This capability
FDB TM Updates | Technical Support Group (TSG) TM | Resource Centre
provides the technical operator with the ability
to quickly iden fy known emi ers that are Periodic Frequency Database (FDB) TM updates are available for download free of charge to licensed
licensed within or adjacent to the geographical technical operators, from the password protected Kestrel TSCM Pro Software portal on ComSec
area. It is o en just as important to verify LLC's website. The operator may either download the en re FDB TM regional or na onal frequency
legi mate signals to rule them out as poten ally database file sets, or a specific FDB TM file of interest, on demand during deployment. Internet access
hos le. The technical operator can define the is required for FDB TM file download, and for access to online mapping resources.
search query for licensed emi ers at arbitrary Operator Signal List (OSL) TM
distances referenced to the collec on GPS fix,
The Kestrel TSCM ® Professional So ware, Operator Signal List (OSL) TM, is an important spectrum
or manually entered geographical coordinates
management component of the Advanced Signals Intelligence Database (ASID) TM, as a user‐defined
can be u lized. A query based on Free Space
database component list that spans mul ple, Kestrel Project Files (KPF) TM, and is therefore
Propaga on (FSP) TM RSSI values within a
independent of any par cular Kestrel Project File (KPF) TM. Mul ple OSL TM databases can be
search range of (‐20 dBm to ‐90 dBm) is also
customized and maintained. An entry on the OSL TM, is prompted from an operator defined signal
supported. 
event, for inclusion within the current OSL TM database file, and may be recalled, and displayed
“Specifica ons Subject to Change without no ce…” against the real‐ me, or a historical Kestrel Project File (KPF) TM, during post analysis and review. 

Kestrel TSCM ® Professional So ware | Advancing the Art and Science of Technical Security
08 | Key Features Kestrel TSCM ® Professional So ware | SDR | RF Switch | Fiber‐Op c Hardware Support

Receiver | Spectrum Analyzer Support Signal Hound Inc. | United States of America

Model Bandwidth IFBW Connec on ROI Speed

The Kestrel TSCM ® Professional So ware
SM435B (Pending) 100 kHz TO 43 GHz 160 MHz USB‐C | USB 3.0 1 THz @ 30 kHz
supports select; industry significant, So ware SM200C | Photonic 100 kHz to 20 GHz 160 MHz SFP+ 10 GbE 1 THz @ 30 kHz
Defined (SDR) search receivers and spectrum SM200 B 100 kHz to 20 GHz 160 MHz USB‐C | USB 3.0 1 THz @ 30 kHz
analyzers that compliment mission specific BB60C 9 kHz to 6 GHz 27 MHz USB‐C | USB 3.0 27 GHz @ 20 kHz
deployment requirements, and fulfill scalable BB60A 9 kHz to 6 GHz 20 MHz USB‐C | USB 3.0 24 GHz @ 10 kHz
budget reali es.  SA124B 100 kHz to 12.4 GHz 240 kHz USB 2.0 140 MHz / Sec
TM SA44B 1 Hz to 4.4 GHz 240 kHz USB 2.0 140 MHz / Sec
Kestrel Support Profile (KSP)

Kestrel Support Profiles (KSP) TM, interface ThinkRF Corpora on | Canada

Model Bandwidth IFBW Connec on ROI Speed

across supported SDR receiver or spectrum
R5500‐408 | 418 | 427 9 kHz to 8 (18) (27) GHz 100 MHz GIGABIT LAN 12 GHz / Sec
analyzer, allowing mul ple manufacturers
R‐5750‐408 | 418 | 427 9 kHz to 8 (18) (27) GHz 100 MHz GIGABIT LAN 12 GHz / Sec
products to be deployed within the same
system, and provides first in its class, Rohde & Schwarz | Germany
dynamically synchronized hand‐off, of the Model Bandwidth IFBW | DEMOD Connec on ROI Speed (12.5 kHz)

spectrum and demodula on processes without EM100 (OPT RC + PS) 9 kHz to 3.5 GHz 10 MHz | 500 kHz LAN 1.3 GHz / Sec

interrup on, loss of spectrum data, or loss of EM100 (OPT RC + PS) 9 kHz to 7.5 GHz 10 MHz | 500 kHz LAN 1.3 GHz / Sec

search receiver communica on.  PR100 (OPT RC + PS) 9 kHz to 3.5 GHz 10 MHz | 500 kHz LAN | USB 2.0 1.3 GHz / Sec

PR100 (OPT RC + PS) 9 kHz to 7.5 GHz 10 MHz | 500 kHz LAN | USB 2.0 1.3 GHz / Sec
Custom SDR Hardware Support
Tektronix | Canada
Support for addi onal end‐user specific,
Model Bandwidth IFBW Connec on ROI Speed
So ware Defined Radio (SDR) hardware is
RSA306‐B 9 kHz to 6.2 GHz 40 MHz USB‐C | USB 3.0 TBD
accomplished with a powerful Kestrel Support
Profile (KSP) TM that becomes the interface Anritsu Corpora on | Japan

between the Kestrel TSCM ® Professional Model Bandwidth IFBW Connec on ROI Speed

MS2090A (Pending) 9 kHz to 54 GHz TBD LAN TBD

So ware, and all other supported receivers and
MS272xT 9 kHz to 43 GHz TBD LAN TBD
spectrum analyzers, to achieve full operability
MS272xC 9 kHz to 43 GHz TBD LAN TBD
across all of the standard features and advanced
func onality, including support for both Shearwater TSCM | United Kingdom

spectrum and demodula on hand‐off. Virtually Model Bandwidth IFBW Connec on ROI Speed

any SDR hardware can be ported to Kestrel for Merlin MK 4 (Pending) 30 GHz TBD LAN TBD

full opera onal support (please contact us for Merlin MK 3 30 GHz TBD LAN TBD

KSP TM specifica ons, requirements, and CRFS | United Kingdom

an cipated development costs).  Model Bandwidth IFBW Connec on ROI Speed

Signal Hound | SM200B Receiver RFeye Node 10 MHz to 6 GHz 10 MHz LAN TBD

RFeye Node 10 MHz to 18 GHz 10 MHz LAN TBD

The SM200B is a new genera onal industry
Keysight | FieldFox Handheld Microwave Spectrum Analyzer
disrup ve technology, that is designed to
Model Bandwidth IFBW Connec on ROI Speed
tackle the most complex mission specific
N9962A 5 kHz to 50 GHz 10 MHz LAN TBD
criteria, including, managed Remote Spectrum
Surveillance and Monitoring (RSSM) TM SDRPlay | United Kingdom

applica ons. The sweep speed is | 1 THz / Sec Model Bandwidth IFBW Connec on ROI Speed

at 1 MHz RBW | 1 THz / Sec at 100 kHz RBW |, RSP2Pro (Uncalibrated IQ) 1 Hz to 2 GHz 8 MHz USB 2.0 TBD

and | 1 THz / Sec at 30 kHz RBW |. This blazing RF (Antenna) Switch Support | Mini‐Circuits | United States of America
sweep speed translates to | 160 GHz / Sec at Model Range Number of Ports Connec on Control
10 kHz RBW |, and | 20 GHz / Sec at 1 kHz RC‐1SPDT‐A18 DC to 18 GHz 2 Ports USB 2.0 | LAN (Pending) Kestrel ® So ware Control
RBW |. To appreciate just how fast the SM200B RC‐1SP4T‐A18 DC to 18 GHz 4 Ports USB 2.0 | LAN (Pending) Kestrel ® So ware Control
sweeps 100 kHz to 20 GHz @ 10 kHz RBW, RC‐1SP6T‐A12 DC to 12 GHz 6 Ports USB 2.0 | LAN (Pending) Kestrel ® So ware Control
this translates to 8 FPS, or 125 mSec for each
ICRON (Fiber‐Op c) Remote Hardware
20 GHz ROI sweep. 
Model Fiber‐Op c Range Connec on Ports

“Specifica ons Subject to Change without no ce…” Spectra 3022 Mul ‐Mode | 50/125 100 Meters USB‐C | USB 3.0 2‐Port

Raven 3124 Mul ‐Mode | 50/125 200 Meters USB‐C |USB 3.1 4‐Port
Well Posi oned to Hunt in a Complex
Signal Environment Visionary So ware Beyond the Technology Limita ons
09 | Key Features
Session Report Generator (SRG) TM

The Kestrel TSCM ® Professional So ware

includes the ability to generate and export a
wide range of standard repor ng elements for
inclusion within a, structured session ac vity
report. The Kestrel TSCM ® Professional
So ware, Session Report Generator (SRG) TM
provides the technical operator with the ability
to generate comprehensive, mul ple on‐the‐fly,
run me and post capture analysis and review
reports, to highlight different aspects of the
project, and accommodate the needs of the
technical operator and end‐user. The SRG TM is
easy to use and renders internally generated
PDF reports that include virtually all aspects of
the run me session, such as, operator defined
Enhanced Operator Centric Work‐Flow
spectrum plots of the en re Range of Interest
(ROI), and operator selectable signal list The ambient RF spectrum represents a extremely complex and challenging work environment for the
data that can be tailored to the needs of the professional technical operator. The ability to separate what o en amounts to many thousands of
intended reader. For example, a simplified “friendly” ambient signal events, from perhaps the one difficult to detect “hos le” Signal of Interest
overview report can be generated for the (SOI), by design, significantly increases the Probability of Detec on (POD) during ac ve field
client, management, or end‐user, and a deployment, when faced with an unfamiliar spectrum environment. The ability to detect, iden fy,
detailed technical report can be rendered for verify, and dismiss with confidence, benign signals, is of considerable prac cal value. This powerful
the technical operator, or analyst. The ability to capability is further enhanced by the ability of the technical operator to populate, load, and display
import target area photographs, images, floor any number and type of custom Operator Signal Lists (OSL) TM, designed to span mul ple Kestrel
plans, riser plots, and screen captures, adds the Project Files (KPF) TM at the applica on level as an operator definable database resource. Any number
powerful dimension of virtual reality capability of custom OSL TM files can be maintained for use within the applica on, defined by category, loca on,
that strengthens the en re repor ng process. region, or other technical operator preferences, such as known friendly, known hos le, or reference
Kestrel's convenient PDF file format is rendered Signals of Interest (SOI). The technical operators work‐flow is intui ve from setup, through, run me
as a standalone report, that can be viewed collec on, event capture, and the analy cal signal analysis process by the technical operator, or
universally with any PDF viewing so ware, and SIGINT analyst. The Kestrel TSCM ® Professional So ware easily transi ons across challenging,
custom mark‐up can also be added with Adobe mission specific, and operator deployment objec ves, including those associated with, TSCM,
Acrobat. The exported PDF report is also ready RSSM TM, SIGINT, Regulatory Compliance, Base Transceiver Sta on (BTS) site monitoring, and many
for inclusion as an electronic a achment, within other communica ons and Radio Frequency (RF) applica ons. 
a more comprehensive, Electronic Repor ng
Advanced Graphical Mapping | Heat Mapping Display (HMD) TM
System (ERS) TM as defined under the TSB 2000
(Technical) Standard TM, or if necessary printed The ability to import images, such as floor plans, riser plots, 3D graphics, photographs, maps, or an
as an included a achment.  operator rendered image, is fully supported with a powerful receiver level heat map overlay. 

Deployment Reference Database (DRD) TM

The ability of the technical operator to build

and maintain simple reference databases for,
captured IQ sample files, audio sample files,
screen captures of signal characteris cs, etc.,
can be accomplished by building a directory file
structure and saving the reference files, filtered
by date, loca on, or characteris cs. The DRD TM
concept is separate and apart from the Kestrel ®
applica on, and becomes a powerful
proprietary resource for the technical operator,
and is mission specific to the operators client
base. 

Kestrel TSCM ® Professional So ware | Advancing the Art and Science of Technical Security
10 | Key Features
RF Visualizer (RFV) TM Technology

The Kestrel TSCM ® Professional So ware

includes the ability to literally visualize
complex Radio‐Frequency (RF) propaga on
characteris cs for mee ng communica on
standards and regulatory cer fica on
requirements, based on several powerful
compe ng geo‐loca on heat mapping
algorithms, including Gaussian Weigh ng,
Inverse Square Weigh ng, and Free Space
Power Loss (FSPL) to achieve a never before
realized level of clarity in resolving emi er
loca on and / or propaga on valida on
across the defined target area. 

TSCM | Signal Source Localiza on

The ability of the technical operator to

complete a facility or site level walk and plot
Next Genera on | Tap Capture Plot (TCP) TM | OPT TCP
signal source search based on one (1) or more
operator iden fied Signals of Interest (SOI) The future of communica on security depends on the ability to visualize complex RF propaga on
is fully supported, permi ng the technical characteris cs across the defined target area, but must also extend across the far‐field spectrum
operator to quickly build a geo‐loca on heat environment to include large commercial facili es, educa onal and business campuses, shopping
mapping process in real‐ me, based on an auto malls, mee ng and conference facili es, military bases, prison and correc on facili es, hospitals,
loca on Tap Capture Plot (TCP) TM process.  hos le war zones, ci es, communi es and even en re countries. The Technical Research and
Standards Group (TRSG) TM recognizes the importance of this growing requirement for innova ve
Regulatory Inter‐Operability Tes ng
new countermeasures with respect to the emerging 5G technology revolu on and the many other
The ability of the technical operator to build communica on modes currently being implemented or under development. The realloca on and
and maintain regulatory reference databases reuse of older technologies for poten ally hos le purposes is fast becoming a reality. 
of signal propaga on characteris cs, can
Kestrel ® TSCM Professional So ware | RF Visualizer (RFV) TM Propaga on Contour Overlay
easily be accomplished at the facility level to
confirm for example that emergency services Our advanced (agile) reference level propaga on modelling and RF Visualizer (RFV) TM provides the
communica on standards are validated across technical operator with the ability to not only invoke any Signal of Interest (SOI) level event captured
cri cal infrastructure and that repeaters are within the Loca on Differen al Signal Analysis (LDSA) TM process, and render a powerful virtual
in‐fact mee ng the required level of coverage. reality geo‐loca on heat map and then dynamically adjust the reference level to accentuate the
The ability to maintain complex documented emi er localiza on or propaga on voids across the target area. 
evidence of the tes ng protocol and process
is fully supported with our Advanced Report
Generator (ARG) TM. 

Wi‐Fi Coverage | Energy Heat Mapping

The ability of the technical operator or in‐house

Informa on Technology Security (ITS) personnel
to build accurate propaga on models at the
facility level are realized u lizing the TAP
CAPTURE PLOT (TCP) TM process. 

Cellular Repeater Coverage | Band Level

The ability of the technical operator, or mobile

communica on provider, to validate facility
level repeater installa ons is supported across
the various 3G, 4G | LTE network downlink
frequency standards. 

Kestrel TSCM ® Professional So ware | Advancing the Art and Science of Technical Security
11 | Key Features
Dynamic Trace Autonomous Pla orm
(DTAP‐GPS) TM | OPT DTAP‐GPS (Restricted Sale)

The Kestrel TSCM ® Professional So ware

provides a powerful capability that can be
deployed in a backpack (walking), or vehicle
(mobile) to effec vely capture and process
wideband RF energy pa erns within the defined
“func onal” target area and in real‐ me render
a geo‐loca on heat map that is built around a
powerful RF propaga on visualiza on modeling
capability.

The autonomous capability is permits the

technical operator to covertly deploy a powerful
surveillance pla orm. Real‐Time Inverse Square
Moving Map Algorithm
The ability to derive ac onable RF intelligence
quickly resolving mission cri cal challenges
Dynamic Trace Autonomous Pla orm (DTAP‐GPS) TM | OPT DTAP‐GPS
rela ng to signal localiza on or propaga on
voids is fully supported.  DTAP‐GPS TM is the next genera on of wideband RF analy cs; combining powerful geo‐loca on
heat mapping and advanced RF propaga on modeling with fully autonomous opera on across
Tac cal Field Deployment
a single SDR radio, resul ng in ac onable RF intelligence for a wide range of mission specific
Law‐enforcement, special reac on teams, applica ons.
tac cal scenarios, protec ve opera ons,
The en re DTAP‐GPS TM system can easily be deployed u lizing a small footprint tablet computer
pre‐raid tac cs, regulatory enforcement,
and launched covertly and autonomously in a unassuming backpack to establish an accurate RF
government and military applica ons are
propaga on model at any outdoor special event, airport, high security construc on site intended
significantly enhanced by real‐ me ac onable
for the na onal security apparatus, law‐enforcement, government and military contractor sites,
RF intelligence.
regulatory emission evalua on, special purpose monitoring of the ambient RF spectrum, and for the
Covert and overt deployment scenarios clearly detec on of uninten onal radiators at military bases and other cri cal infrastructure establishments.
benefit from the DTAP‐GPS TM feature. 
The same powerful system can be operated within a vehicle for mobile applica ons for larger sites
Air | Space Applica ons such as campuses, airports and military bases.
The ability to build and deploy fully autonomous The Kestrel TSCM ® Professional So ware is an innova ve new technology that delivers a new
pla orms on a UAV, aircra , helicopter, or methodology firmly based on a modern moving target threat model by suppor ng the na onal
space vehicle provides a new and powerful security infrastructure with important So ware Defined Radio (SDR) milestones. 
capability, in safely capturing mission cri cal RF
intelligence within any number of hos le
environments fully autonomously. 

Gaussian Weight Inverse Square

Algorithm Algorithm

Kestrel TSCM ® Professional So ware | Advancing the Art and Science of Technical Security
12 | Key Features
Channel Profile Mask (CPM) TM

The ability to build “on‐the‐fly” channel level,

and band oriented, Channel Profile Masks
(CPM) TM is supported by our CPM TM editor. CTM TM ITU R2 FWA 3500 MHz | Block Alloca on
Mul ple CPM TM files can be generated,
maintained and recalled during run me, copied
to a new file, and imported from an operator
defined | CSV | file. The ability to display
overlapping channel masks, or band alloca ons
is also supported. Operator level programming
includes the Center Frequency (MHz),
Bandwidth (MHz), and Rx Power (dBm), and the
arbitrary display of a reference amplitude
(dBm). The CPM TM database includes the ability
to assign a | NAME | and | CLASS | tag. The
database file is easily moved to another host
computer running the Kestrel TSCM ®
Professional So ware. Channel Profile Masks CTM TM ITU R2 DECT 6.0 | Channel Alloca on
(CPM) TM are displayed by selec ng the CPM TM
bu on located within the Spectrum Display and
Ac vity control group. The CPM TM database
editor and file management tools are located
Color Coded Spectrum Band | Receiver Status
within the | SPECTRUM | menu structure. 
Color coded spectrum band tabs significantly enhance technical operator situa onal awareness with
Sub‐Harmonic | Harmonic Calculator
immediate visual feedback and verifica on of the run me status:
The ability to quickly predict, and display
| RED | indicates that no SDR Rx is assigned for the spectrum band, frequency alloca on, or channel.
harmonic, and sub‐harmonic frequencies, and
than correlate these with observed spectral | YELLOW | indicates that the SDR Rx is currently assigned, but collec on is paused.
events, supports the iden fica on of poten al
| GREEN | indicates that ac ve run me ac vity is present for the assigned spectrum band alloca on.
spectral threat characteris cs. Provisions are
included for the demodula on of any | BLUE | indicates that the trace count limit ( or trace me limit) for the current LDSA loca on has
Automa c Threat List (ATL) TM, fundamental been reached and collec on has been automa cally | STOPPED | and | LOCKED |.
frequency or 2nd, 3rd, 4th, 5th, 6th, 7th, 8th, | GRAY | indicates bands that are automa cally locked out whenever | SOLO | mode is enabled.
and 9th order, harmonic, and sub‐harmonic
events. Our “Drag and Drop” func onality All significant status visualiza ons are intui vely posi oned on the User‐Interface (UI) and are
enables direct “Drag and Drop” to and from the designed to enhance opera onal situa onal awareness when mul ple SDR radios and / or band
demodulator frequency window, the sidebar alloca ons are present. Run me SDR status dialog windows provide contextual operator feedback for
ATL TM and the Master Automa c Threat List each standby and / or ac ve SDR Rx, and displays the receiver name, run me sweep speed, and the
(MATL) TM, as well as to, and from, the current SDR state, for sweep, demodula on, and analysis modes. Kestrel's first of a kind Probability
Harmonic Calculator Tool (HCT) TM window.  of Intercept (POI) calculator provides the real POI based on the actual full ROI compu ng condi ons.


Kestrel TSCM ® Professional So ware | Well Posi oned to Hunt in a Complex Signal Environment
13 | Key Features
Kestrel ® File | Write Management

Kestrel ® can capture and record all spectrum

trace data in real‐ me (1/n=1), by default, or
can be programmed to capture spectrum trace Dynamic Alert Annunciator (DAA) TM | Supports Unlimited User‐Defined Alert Zones
data at a recording rate (1/n=2, 1/n=5, 1/n=10,
1/n=20, 1/n=50, 1/n=100, 1/n=250, 1/n=500,
1/n=1000), or any value up to (1/n=10000),
by the operator. Default recording is set for
(1/n=1) real‐ me, for a measure of fail‐safe DAA TM | SOI Exceedance Detec on
deployment. “On‐the‐fly”, alert recording is
provides op mal write file management. 

Spectrum Analyzer (SA) Mode

DAA TM | SOI Loss Detec on
An advanced recording and file management
mode allows the technical operator to run the
so ware in a spectrum analyzer mode, without
recording any spectrum data. If a poten ally
hos le Signal of Interest (SOI) is observed, the
operator can quickly enable trace recording
with a single bu on record ability, to ini ate the Dynamic Alert Annunciator (DAA) TM | OPT AEC TM Triggered Export
capture of real‐ me spectrum trace data. This
mode of opera on results in a significant file The ability to automa cally capture and record trace level data, based on technical operator
size reduc on since only, on‐demand, spectrum defined aler ng zone threshold levels at either the band alloca on, or discrete signal level, is fully
trace data is recorded.  supported. This feature not only captures the signal event, but also the trace data rela ve to both
pre‐event and post‐event triggering values, as defined by the operator. This advanced mode of
Extended Deployment | File Size Management opera on reduces the file size by orders of magnitude compared to the real‐ me value, as only the
To accommodate managed Remote Spectrum traces associated with specific aler ng events are captured and recorded. 
Surveillance and Monitoring (RSSM) TM Real‐Time | Triggered Event Capture
assignments, incremental spectrum recording is
fully supported. The operator is able to set the The Dynamic Alert Annunciator (DAA) TM, is a sophis cated feature designed to capture, log and
capture rate, from real‐ me (1/n=1) to display threshold defined signal level, exceedance and signal loss events. Our DAA TM recording
incremental (1/n=10000) recording. Basically, control has proven to be a very powerful operator centric feature, adding an en rely new dimension
for 1/n=100, 99 peak capture traces are to the collec on, and discrete signal analysis process. Focused analy cal sta s cs for each signal
represented as a single Kestrel Super Trace event provide a clear picture of signal characteriza on pa erns and appearance signatures.
(KST) TM. This process iden fies and captures the Addi onal data table columns may also be displayed within a familiar table structure. The ability to
peak energy that occur over the (1/n=?), me / capture operator defined “Alert Zone” data within the DAA TM Signal List structure is fully supported,
trace interval, so that all captured spectral even when the trace recording control is not enabled. The DAA TM Signal List can be exported to a
events are preserved and recorded for analysis. | CSV | file for compara ve analysis, storage, or for use within third‐party produc vity programs. 
WFD compression enables a file size reduc on Audio Alerts | Kestrel Voice Annuncia on (KVA) TM
up to 10000 mes the real‐ me recording value,
The operator can define audio alerts throughout the applica on, and u lize our custom Kestrel ®
with only a minor displacement in event me
Voice Annuncia on (KVA) TM Text‐to‐Speech files, including our exclusive, Daisy and George. 
accuracy that varies with the (1/n=?) value. 

Dynamic Alert Annunciator (DAA) TM

The ability to capture targeted DAA TM signal

events that either exceed, or drop below (loss),
technical operator defined detec on (aler ng)
thresholds, are delineated by any number of
alert zones across the spectrum band alloca on,
is supported by the Kestrel TSCM ® Professional
So ware. The export and import of alert zones,
to and from a CSV file format, is supported. 

Kestrel TSCM ® Professional So ware | Advancing the Art and Science of Technical Security
14 | Key Features
Kestrel ® Analysis and Record Mode (ARM) TM Kestrel TSCM ® Professional So ware | Event Recording Mode (ERM) TM

This feature provides significant operator The Kestrel TSCM ® Professional So ware includes a fully automated alert, based recording control
flexibility and programmability, while providing capability. Intui ve ar ficial intelligence and design level predic ve logic enables the Kestrel so ware
for a powerful measure of ac ve file size to begin ac ve “alert zone” capture and storage recording processes ahead of a signal events
management. The technical operator can appearance within the spectrum. The “Great Kestrel” u lizes keen eyes, a photographic memory, and
deploy the system in a basic Spectrum Analyzer maybe even a li le psychic ability to produce a clear picture of any alert zone based capture, and
(SA) mode without storing any spectra, trace, or trace level recording of any Signal of Interest (SOI), leading up to its appearance, for the dura on of
waterfall data, while maintaining the ability to the event, and for an operator defined period of me beyond the ac ve alert. This innova ve feature
ac vely review the current trace level data on permits the technical operator to build a detailed picture of the ambient RF spectrum environment
the user‐interface in real‐ me (subject to leading up to the Signal of Interest (SOI) alert. Consequently, all new and periodic signal events are
availability of unrecorded, buffered data). There well‐documented, and are available for post event analysis and review, while economizing on storage
are two | RECORD | related controls, the first is requirements. In addi on to performing con nuous capture and recording for the dura on of the
located on the Spectrum Display and Ac vity event, It is possible to record a period of real‐ me trace data before the beginning of any signal
control group that | STARTS | and | STOPS | the event, and for an operator defined period of me beyond the end of the aler ng event. 
write process “on‐the‐fly”, and the second is
Innova ve | Ac ve File Size Management
part of the | NEW SPECTRUM | dialog window.
The | START | and | STOP | write process state In order to facilitate opera onal deployment, and file size management, the | REC | control group
can be changed on‐the‐fly, during run me.  also includes an advanced write control capability (1/n) = | 1 | 2 | 5 | 10 | 20 | 50 | 100 | 250 | 500 |
and | 1000 | op on list (default), or manually up to | 10000 | traces, represen ng the actual number
Automa c Threat List (ATL) TM | CSV Export
of recorded traces that occur during run me capture with (1/n=1) being real‐ me and (1/n=50)
The ability to export standardized | CSV | signal represen ng (1) in (50) peak traces being wri en to the local or network, storage device | + | all
list data, for any automa cally captured, or peak data captured from 100% of the traces, referred to as a Kestrel Super Trace (KST) TM. The
manually entered signal event, is supported analy cal advantages include an order of magnitude, of less trace by trace data, for the technical
within the Kestrel TSCM ® Professional So ware operator to analyze, and significantly enhanced performance of the host computer. 
applica on. Support for the export of Chirp
Kestrel Project Template (KPT) TM
Threat Mode (CTM) TM, Harmonic Signature
Threshold (HST) TM, Minimum Detec on The technical operator can define any number of project templates directly, from the included
Amplitude (MDA) TM, Spectrum Baseline Logging Kestrel Project Template (KPT) TM dialog window. Any number and type of deployment profiles can
(SBL) TM, Signal of Interest (SOI), Operator Signal be created by the operator, managed, edited, stored, and recalled for deployment, for common
List (OSL) TM, and Dynamic Alert Annunciator run me collec on strategies. The ability to pre‐configure a working template for different physical
(DAA) TM signal lists are supported.  loca ons, or collec on and analysis parameters, is fully supported. The current Kestrel Project File
(KPF) TM can also be saved as a Kestrel Project Template (KPT) TM. The KTP TM database file is easily
transportable to another host computer. This ability is in keeping with our operator centric, and
work‐flow oriented philosophy, and provides a very powerful operator defined resource. 

1 DEFINE | 2 MANAGE | 3 EDIT | 4 DEPLOY

Operator Centric Design

The Kestrel TSCM ®

Professional So ware
philosophy is firmly
based on providing
advanced professional
level features and
real‐world func onality
that places the technical
operator back in control
of the deployment,
collec on, and analy cal
process. 

Kestrel TSCM ® Professional So ware | Well Posi oned to Hunt in a Complex Signal Environment
15 | Key Features
Operator Centric | Work‐Flow Oriented

Kestrel TSCM ® supports operator defined

spectrum profiles, rapid deployment
(tac cal) project templates, and high
resolu on posi onal zoom control (up to
| Loca on Differen al Signal Analysis (LDSA) | Loca on Specific
200x) for detailed analysis, and precise
| Time Differen al Signal Analysis (TDSA) | Time Block Defined
signal parameter measurements. 
| Receiver Differen al Signal Analysis (RDSA) | Mul ple Receiver
Typical Deployment Applica ons

Kestrel TSCM ® Professional So ware is an ideal Kestrel ® High‐Defini on Spectra Literally wants to Fly off of the Display!
pla orm for a wide range of RF applica ons.
Kestrel TSCM ® Professional So ware | Respected Worldwide
 Operator Assisted Radio Frequency (RF)
Technical Surveillance Countermeasures The Kestrel TSCM ® brand is responsive to the needs of the end‐user. The advanced so ware
(TSCM), Powerline Carrier (PLC), and engineering, unique design, and innova ve concept of the Kestrel TSCM ® Professional So ware
Broadband Powerline (BPL) verifica on. has become the standard, against which, all other TSCM so ware applica ons will be compared,
evaluated, and judged in the future. 
 Managed Remote RF Spectrum Surveillance
and Monitoring (RSSM) TM. Unprecedented Innova on | Qualified Research and Development (R&D)

 In‐Place Spectrum Monitoring (IPSM). Kestrel ® requires significant annual financial investment in Research and Development (R&D), to
achieve new and innova ve deployment tools that are operator centric, and provide unprecedented
 High‐Risk, Protec ve Opera onal Support, collec on, capture, analysis and repor ng capabili es for deployment in a modern moving target
Counter‐Intelligence (CI) Applica ons, and threat model. Significant, on‐going R&D is essen al in mee ng tomorrow’s threat environment. 
Technical Surveillance Countermeasures
(TSCM). Deployment Flexibility | Scalability

 Regulatory Spectrum U liza on, and Standard included features and func onality, ensure that the Kestrel TSCM ® Professional So ware
Valida on, Enforcement, and Management. is deployment ready at all known and developing threat levels, and encompasses the widest possible
deployment requirements of professional operators. PDTG's So ware Development Group (SDG) TM
 Regulatory Compliance, Inves ga ons and is responsive to the needs of technical operators. In‐fact, we encourage operators to share their
Electro‐Magne c Interference (EMI) Analysis. so ware experiences and ideas, as part of our “work in progress” deployment methodology. PDTG's
 Spectrum and Signal Integrity, Compliance development philosophy is well founded, on con nuous improvement, and new features. 
and Verifica on. Typical Hardware Configura on | Considera ons
 Telecommunica ons Industry, Base Sta on The Kestrel TSCM ® Professional So ware is designed to run on the Windows OS, for deployment
Transmi er Monitoring. on an Intel i7 (6th, 7th, and 8th Genera on) HQ processor, Laptop, or micro‐computer with 16 GB
 Radio Frequency (RF), Spectrum Baseline of RAM. Kestrel so ware supports search receiver connec vity using USB 2.0, USB 3.0, USB‐C,
Logging (SBL) TM. interfaces and virtual LAN and Fiber‐Op c modules permit USB 2.0 / USB 3.0 search receiver
connec vity to be managed remotely over Cat 5e or Cat 6 LAN cabling infrastructure, or across a
 Tac cal Intelligence Gathering, Barricaded mul ‐mode 50 / 125 Fiber‐Op c cable. Remote Desktop So ware (RDS) permits full command and
Hostage, Radio Intercept and Communica on control via a LAN, or an Internet connec on, including the use of 3G / 4G / LTE cellular modems. 
Monitoring.
Analy cal Intelligence | Waterfall Display (WFD) | Morse Code Sta on Iden fier
 Search and Rescue (SAR), Radio Direc on
Finding (RDF), Tac cal Beacon Homing.

 Technical Surveillance Device (TSD), Tes ng,

Analysis, and Signal Characteriza on,
including Pre‐deployment Tes ng of
Offensive Surveillance Technology.

 Universi es, Technical Colleges, Educa onal

Ins tu ons, and Radio Engineering.

 Na onal Security Apparatus. 

Kestrel TSCM ® Professional So ware | Advancing the Art and Science of Technical Security
16 | Key Features
Kestrel ® Licensing Process | Op ons

Kestrel's standard End‐User License Agreement

(EULA) includes a full version of the Kestrel
TSCM ® Professional So ware, and two (2)
Ac va on Security Keys (ASK) TM, for use with
any two (2) supported receivers or analyzers,
across any two (2) host computer installa ons.
Our so ware ac va on is machine, and
hardware specific, requiring an Ac va on
Security Key (ASK) TM for each individual host
computer and each receiver. Adding addi onal
receivers, requires the purchase of a sub‐license
Ac va on Security Key (ASK) TM.  Kestrel ® Project Ac vity Scheduler | Time Zone Off‐Set

Mul ple License Management (MLM) The Kestrel TSCM ® Professional So ware includes a uniquely versa le Project Ac vity Scheduler that
provides the ul mate control over the run me collec on process. The ability to individually schedule
MLM is available to meet the deployment
run me ac vity across mul ple search receivers and analyzers, is just the beginning. Full ac vity
requirements of larger organiza ons that need
scheduling support is provided at the spectrum band level, giving the technical operator the ability to
to manage mul ple licenses across distributed
easily program complex mul ple start and stop ac vity across mul ple, independent spectrum band
Remote Spectrum Surveillance and Monitoring
alloca ons, across each connected device. Programming is accomplished from either the Setup
(RSSM) TM pla orms. 
Wizard, or within the applica on during run me. Our advanced Time Zone Offset, provides accurate
Kestrel ® So ware | Release Updates spectral me‐stamping, without the need to change the host computer clock, when traveling. 

So ware updates are always provided free of Kestrel LAN Remote (KLR) TM | USB 2.0 | Cat 5e / Cat 6 Standards | 100 Meters (328 Feet)
charge, within the same so ware genera on
The Kestrel LAN Remote (KLR) TM, provides virtual Gigabit Ethernet Network support, when u lizing a
indefinitely. The latest so ware release is
supported receiver with a USB 2.0 interface. The KLR TM hardware module, allows the technical
always available for download, from the
operator to control remotely located receivers, directly via a virtual Gigabit LAN connec on over a
password protected Kestrel TSCM Pro Software
Cat 5e or Cat 6 network cable. The KLR TM leverages the exis ng LAN infrastructure to provide an
portal on ComSec LLC's website. Addi onal
alterna ve remote network deployment method for search receivers. 
tools, example files, and other resources are
available for download, including the FDB Kestrel ® Lightning Module (KLM) TM | USB 3.0 | Fiber‐Op c Remote TM
spectrum licensing database for Canada, and
Support for USB 2.0 and USB 3.0 Fiber‐Op c Remote modules u lizing Mul ‐Mode, 50/125 OM2 |
the United States of America. We have also
OM3 Fiber‐Op c connec vity, providing an addi onal op on for remote receiver opera on. 
provide updated SPF TM, CPM TM, and OSL TM
working files and examples. Keeping your Kestrel ® Lightning Module (KLM) TM | Gigabit LAN | Fiber‐Op c Remote TM
Kestrel ® so ware, computer OS, USB and Support for Gigabit LAN, Fiber‐Op c Remote modules u lizing Mul ‐Mode, 50/125 OM2 | OM3
graphics drivers up to date, is essen al.  Fiber‐Op c connec vity, providing an addi onal op on for remote receiver opera on. 

TM
Time Differen al Signal Analysis (TDSA) TM

Kestrel TSCM ® Professional So ware | Well Posi oned to Hunt in a Complex Signal Environment
17 | Key Features
Technical Support Group (TSG) TM Receiver Differen al Signal Analysis (RDSA) TM | Operator Defined Receiver Loca on

Several layers of advanced technical support With powerful standard included features and capability, such as our Loca on Differen al Signal
are provided by our Canadian based Technical Analysis (LDSA) TM, for mul ple (local) collec on loca on compara ve; enhanced by real‐ me echo
Support Group (TSG) TM specialists, including differen al mode, the powerful capability of Time Differen al Signal Analysis (TDSA) TM, for single
self‐help access to the online (PW Protected) loca on capture, me block compara ve and analysis, and the innova ve mission cri cal
Technical Support Group (TSG) TM Resource advantages of Receiver Differen al Signal Analysis (RDSA) TM, which removes the limita on of a
Centre website, and Comsec LLC's password single defined loca on, “collect and compare”, for peak sta c traces only, which o en have li le or
protected Kestrel TSCM Pro Software portal, no meaning once they become historical. RDSA TM is designed to provide the ability to display and
and direct lines of communica on with compare real‐ me, peak, and average spectra across independent receivers, with the first in its class,
hardware manufacturers. Resources include a dynamic sub‐band drop in overlay — Kestrel ® has got you covered, no ma er what your mission
very comprehensive proprietary So ware specific deployment requirements, objec ves, or analy cal plan. Receiver Differen al Signal Analysis
Programming and Opera on Manual (SPOM) TM, (RDSA) TM allows the operator to select and display any available receiver, or spectrum analyzer, as
unlimited Email, and TeamViewer TM based an overlay, running in either a Dual Receiver Opera on (DRO) TM, or Mul ple Receiver Opera on
technical support assistance, all designed to (MRO) TM, environment. Our RDSA TM feature not only supports real‐ me, and historical, mul ple
keep your system running smoothly.  receiver trace level spectra compara ve, but also extends the capability to include a unique,
mul ple trace Waterfall Display (WFD), providing the operator with a powerful, defined, real‐ me
Operator Training | Cer fica on Opportuni es
mul ‐layer waterfall display. RDSA TM is another example of a new class of features specifically
Virtual Kestrel TSCM Pro Software training is developed for a modern moving target threat model. Receivers can be independently designated
available at your location for groups consisting and all bands and sub‐bands can be displayed in real‐ me, as a spectra overlay. 
of a minimum of six students. At the end of the
five day program, attendees qualify for the Full Spectrum | RX1, RX2, RX3, and RX4
Certified Technical Operator (CTO) TM
designation. Kestrel instructors are experienced
technical operators and bring real‐world
applica ons into the training environment. 

Third‐Party | Produc vity So ware

The ability to export data to standard CSV file 900 MHz ISM | RX1, RX2, RX3, and RX4
format, allows the technical operator to RX‐NT09‐WEST
arrange, select, edit and analyze raw Spectra,
RX‐NT09‐NORTH
and RSSI values. The ability to generate RX‐NT09‐NORTH
RX‐NT09‐WEST
custom graphical spectrum models for reports
and presenta ons is realized, adding a powerful
analy cal capability to the Kestrel ® so ware.
RDSA TM | Dynamic Waterfall Overlay (DWO) TM

The ability to overlay the spectra from mul ple defined loca ons, mul ple me blocks, and mul ple
Frequently Asked Ques ons (FAQ) receivers, is yet another Kestrel ® development milestone. We have included a powerful mul ple
Q | How does the Kestrel ® Dual Receiver receiver waterfall, providing unprecedented compara ve data, directly on the waterfall display. 
Opera on (DRO) TM “Hand‐Off” Work? Precision Naviga on | Horizontal Range Control (HRC) TM
A | Our dynamically synchronized, receiver One of the many key design capabili es of the Kestrel TSCM ® Professional So ware is the powerful
“hand‐off” capability extends to both the operator centric, Posi onal Zoom Control (PZC) TM. The HRC TM feature is yet another innova ve
spectrum and demodula on process. It is not milestone found within the Kestrel TSCM ® Professional So ware, that significantly enhances rapid,
limited to Dual Receiver Opera on (DRO) TM, but precise spectral naviga on. The technical operator can add, edit, maintain, or delete, any number of
rather supports mul ple receivers. It is possible unique Spectrum Profile Files (SPF) TM, which are then u lized to set the search receiver or spectrum
to connect a Signal Hound BB60C, ThinkRF analyzer to specified user‐defined bands or sub‐bands, frequency blocks, spectrum alloca ons, or
R5500, and any other supported receiver, or channels. The HRC TM feature takes advantage of the SPF TM database and turns it into a powerful
analyzer, and dynamically “hand‐off” the Horizontal Range Control (HRC) TM naviga onal tool. The technical operator can manually select any
spectrum sweep and demodula on process of the available HRC TM menu op ons which directly reflect the SPF TM database content, to precisely
across each device in real‐ me. Simply select navigate to any defined Range of Interest (ROI). The Horizontal Range Control (HRC) TM is available
the hand‐off” receiver, and the process is during run me and post analy cal review of historical Kestrel Project Files KPF) TM, along with all
handled by the so ware, without data loss.  other spectrum and waterfall naviga on tools. 

Kestrel TSCM ® Professional So ware | Advancing the Art and Science of Technical Security
18 | Key Features
Kestrel Spectrum Analy cs (KSA) TM

The ability to export user‐defined Spectra trace

data to CSV file format, is supported within the
Kestrel TSCM ® Professional So ware. Spectra
trace data export is useful for detailed and
focused analysis of any SOI trace level data,
when u lizing third‐party RF analysis hardware,
or produc vity so ware. 

Export (CSV) Spectra

To aid technical operators in a more detailed

analysis of collected trace level data, the ability
to export operator defined Spectra values is
supported. The operator is able to export
Spectra to a | CSV | file, based on | LOCATION |
and / or | BAND | related criteria. The ability to
further refine the exported data, includes
Kestrel Super Trace (KST) TM
selec ng the | START | and | END | trace
number sequence. This feature can be u lized During Remote Spectrum Surveillance and Monitoring (RSSM) TM over a period of days, weeks, or
during run me collec on, or during post event Write Compression | 1/n=50
months, waterfall and trace data can become a
analysis and review, by the technical operator, storage challenge, and requires me‐intensive post
or SIGINT analyst.  event analysis, which can be a daun ng process. Our
unique write management feature, in combina on
Dynamic Alert (CSV) | Spectra Export
Real‐Time Waterfall Display with the ability to compress the trace and waterfall
The ability to export Spectra trace data as data, is a powerful innova on that significantly
associated with a dynamic alert, threshold improves the operators analysis and review capability.
viola on, to a | CSV | format is supported.  Our spectrum and waterfall compression method
Dynamic Alert (CSV) | RSSI Export enhances rendering by reducing the memory and storage footprint, and brings excep onal clarity to
the waterfall display. This unique func onality permits the technical operator to easily observe
The ability to export RSSI values based on a periodic peak energy pa erns across the Range of Interest (ROI), over a period of me. A KST TM is
dynamic alert, threshold viola on, to a | CSV | the total combined energy based on the number of captured traces, and run me capture me. 
format is supported. 
Kestrel Super Trace (KST) TM | Waterfall Buffer Clear (WBC) TM Bu on
Waterfall Display (WFD) | Analy cal Review
The Kestrel Super Trace (KST) TM feature is controlled by the technical operator, by first selec ng the
During normal run me opera on, all spectra desired (1 / n = ?) write control se ng value during setup, or within run me capture. The WBC TM
and waterfall trace data is wri en to storage, in feature may be invoked by the operator by pressing the Waterfall Buffer Clear (WCB) TM bu on. This
a playback ready format, unless the operator process clears all unsaved spectra data, leaving only the Kestrel Super Traces (KST) TM spectra. Our
manually disables the write management write management strategy strikes an important balance between capturing too much, or too li le
feature for the run me session, individual band analy cal data. The technical operator should consider the an cipated length of the run me
alloca on, or Range of Interest (ROI). This is an deployment when configuring the op mal write management value. 
important element in the decision to purchase
any par cular TSCM equipment resource. All Live View Analysis (LVA) TM | Uninterrupted Run me Analysis
operator defined data must be stored in a
format that permits full analy cal playback and
analysis. Kestrel TSCM ® provides the ability
to store, open, and even con nue run me
collec on at any me in the future, within
the same Kestrel Project File TM bringing
unprecedented capability to the analy cal
process. It is essen al that write management
be u lized to minimize the amount of data for
long term deployment scenarios.  Kestrel ® Waterfall Compression Brings Clarity to Complex Spectra

Kestrel TSCM ® Professional So ware | Well Posi oned to Hunt in a Complex Signal Environment
19 | Key Features
Automa c Export Control (AEC) TM | OPT AEC | AEC TM | CSV Table Data

The Kestrel TSCM ® Professional So ware by The ability to define the | CSV
design supports Remote Spectrum Surveillance TABLE DATA FORMAT | for
and Monitoring (RSSM) TM for a wide range of export, is supported to allow
una ended field deployment applica ons. The the technical operator to
Automa c Export Control (AEC) TM feature is a decide which export elements
powerful, budget friendly, op onal | OPT AEC | are required. The operator is
add‐on module that seamlessly integrates with able to independently select
the Kestrel TSCM ® Professional So ware, and the | MDA TM | SBL TM
significantly enhances una ended opera on, by | CTM TM | HST TM | and
periodically expor ng the Automa c Threat List | DAA TM | elements, including
(ATL) TM data to CSV file format, on an operator select all columns, or select
defined, periodic, or event triggered basis. The only those required. The
technical operator can define the | EXPORT | technical operator can drag
directory loca on by selec ng the | AEC the desired values from the
DIRECTORY | menu op on located within the “available elements” to the
| FILE | menu structure. By default, AEC files will “ac ve elements” window. We
be stored within the default | DATA | directory, have included a | RESET |
and not in the current Kestrel Project File (KPF). defaults, and | CLEAR | bu on,
The operator can easily define the desired write to assist in advanced feature
storage loca on on any available local storage programming. 
media, network drive, or cloud storage for easy
retrieval, analy cal review, and a measure of AEC TM | Triggered Export (CSV)
fail‐safe data integrity.  The AEC TM triggered export of | DAA TM EXCEED | DAA TM LOSS | NEW MDA TM | NEW SBL TM
AEC TM
| Periodic Export (CSV) | NEW CTM TM | and / or | NEW HST TM | data, is supported for | EXPORT RSSI | EXPORT SPECTRA |
and / or | EXPORT IQ | to | KIQ | and | CSV | file format. Triggering is a func on of operator level
The me periodic export of | MDA TM | SBL TM |
programming of the Dynamic Alert Annunciator (DAA) TM, Minimum Detec on Amplitude (MDA) TM
CTM TM | HST TM | and / or | DAA TM | data is
threshold, Spectrum Baseline Logging (SBL) TM threshold, as well as the CTM TM and HST TM detec on
supported, based on the selec on of a default
profiles. The operator is able to define an IQ trigger | PRE‐EVENT (IFB TM Mode Only) |, capture
| AUTO EXPORT | value of | 1 | 3 | 8 | 12 | 24 |
se ng value of | NONE | 100 mSec | 250 mSec | 500 mSec | 1 Sec (Default). A | POST‐EVENT |
48 | 72 | hours. Alternately, the operator may
capture se ng value of | 100 mSec | 250 mSec | 500 mSec | 1 Sec | 2 Sec | and | 5 Sec | are
define any custom me value with the format
currently supported. An operator defined | MAXIMUM EVENT DURATION | capture se ng value of
| 30 S | 30 M | 30 H | 30 D | (seconds, minutes,
| NONE (Not Recommended) | 100 mSec | 250 mSec | 500 mSec | 1 Sec | 2 Sec | 5 Sec | 10 Sec | 15
hours, and days), to invoke the desired
Sec | 20 Sec | 30 Sec | 60 Sec |, and | 120 Sec | are currently supported. 
| TIME PERIODIC | export value. The operator
can select | EXPORT ALL |, meaning all signal Essen al IQ Recording and Playback | FFT Demodula on Visualizer
events are exported on each export cycle, or Manually ini ated IQ Recording and Playback (KIQ | CSV | WAV) is a standard feature within the
| ONLY CHANGES |, meaning only the changes Kestrel TSCM ® Professional So ware, providing the technical operator with a powerful analy cal
since the last cycle are exported. The operator capability. Record, playback, sub‐sampling playback, looping and a CSV to KIQ file conversion u lity,
can reset the | AUTO EXPORT | me value at are all available, along with real‐ me | IQ | FFT displays. Please note that the automa c IQ capture is
any me, and select | EXPORT NOW | should only available within the op onal Automa c Export Control (AEC) TM | OPT AEC | module. 
the operator not wish to wait for the current |
AUTO EXPORT | cycle to complete. 

Kestrel IQ (KIQ) TM | Record and Playback

Building an | IQ Sample Reference database

has never been so easy! Record, playback,
sub‐sample and loop captured IQ files in our
proprietary binary Kestrel IQ (KIQ) TM format, or
industry standard RAW CSV and WAV IQ file
formats. Convert | RAW CSV | files to | KIQ |
format using a built‐in conversion u lity. 

Kestrel TSCM ® Professional So ware | Advancing the Art and Science of Technical Security
20 | Key Features
Audio Demodula on | Signal Analy cs

The Kestrel TSCM ® Professional So ware

provides direct demodula on of AM, AM‐USB,
AM‐LSB, FM, and NTSC analog video. Our
“Drag and Drop” technology allows any signal
list event, to be dropped directly to the
demodula on control group, from any
populated signal list entry, including the
Dynamic Alert Annunciator (DAA) TM, and
Harmonic Calculator Tool (HCT) TM. Addi onal
Digital Demodulators and Kestrel Protocol
Analy cs (KPA) TM are under development. 

Kestrel Demodula on Visualizer (KDV) TM

The Demodula on Visualizer (KDV) TM includes

an RF Spectrum Display (RFD), Audio Spectral
Density (ASD), IQ Diagram (IQD), IQ Vs Time
Display, RSSI History Display (RHD), analog RSSI
Display (ARD), and NTSC Video display. An Audio
Oscilloscope Display (AOD), and (Audio Fre‐
quency) AF Spectrum Display (ASD), visualizes
baseband signal representa ons, including the
presence of embedded sub‐carriers. Controls
are provided for squelch, volume and mute. 

IF Filter Control (IFC)

During the demodula on process, various

baseband (audio) filter op ons compa ble with
the currently selected IF Bandwidth (IFBW), are
dynamically generated. The filter value is
visually represented within the AF Spectrum
Display (ASD), and applied to the demodulated
audio stream. 

Kestrel Wave Recorder (KWR) TM

The Kestrel Wave Recorder (KWR) TM permits

the operator to record audio samples for
further technical analysis, inclusion in reports,
and for eviden ary, and training purposes. 

RSSI Tone Locator (RLT) TM

The RSSI Tone Locator (RLT) TM provides an

amplitude sensi ve audio alert tone that can be
u lized independently, or simultaneously, over
the origina ng audio, for emi er localiza on. 

RSSI Trending Display (RTD) TM

To assist in quick emi er localiza on, a Operator Defined | Demodula on Mul ple Radio “Hand‐Off”
powerful RSSI Trending Indicator (RTI) TM is The ability of the operator to dynamically “hand‐off” the demodula on and analysis process to any
included to aid the technical operator, when other supported search receiver, or analyzer is supported. This essen al feature permits the operator
u lizing a direc onal antenna, such as the to u lize a dedicated, receiver or analyzer, for the demodula on and analysis process, while allowing
Kestrel Log Periodic (KLP) TM antenna kit.  the search receiver to con nue uninterrupted run me capture. 

Kestrel TSCM ® Professional So ware | Well Posi oned to Hunt in a Complex Signal Environment
21 | Key Features
Signal Detec on | Iden fica on |Analysis

The ability of the Kestrel TSCM ® Professional

So ware to capture, and display near‐field
Signals of Interest (SOI), allows the technical
operator to quickly iden fy the presence of
poten ally hos le signal events, and
immediately, proceed to locate the source of
the emission. Loca ng and neutralizing hos le
emi ers is the primary deployment objec ve of
the operator. The analysis of any poten al
intelligence that might be contained within the
Signal of Interest (SOI), or stored within the RSSI Trending Display (RTD) TM
device is a secondary considera on. 
The RSSI trending display provides visual informa on about the RSSI Vs Time, RSSI Vs Loca on, and
Channel Profile Mask (CPM) TM RSSI Vs Direc on, when u lizing the Kestrel Log‐Periodic (KLP) TM wideband search antenna. 
The ability to clearly iden fy official ITU Power Line Carrier (PLC) | Broadband Power Line (BPL) | Kestrel Signal Analy cs (KSA) TM
bandwidth specific alloca ons at the signal
The growing popularity of Power Line Carrier (PLC), and Broadband Power Line (BPL) devices,
and / or band level, promotes excep onal
u lizing advanced signal classifica ons, and modula on types such as BPSK, FSK, and OFDM, are
situa onal awareness, allowing the technical
easily iden fied using the Kestrel TSCM ® Professional So ware, and the hardware based, Kestrel ®
operator to focus on the iden fica on of
3D Energy Probe (KEP), Power Line and Radiated Antenna. 
poten ally hos le signal events, while verifying
and ignoring, known friendly signals.  Out of Band (Hos le) Signals
TM
Peak Envelope Capture (PEC) When the technical operator u lizes the Channel Profile Mask (CPM) TM capability, the presence of
poten ally hos le, out‐of‐band emi ers are easy to iden fy, as opera ng within the ambient RF
The ability to capture and display the ambient
spectrum. Near‐field emi ers will o en exhibit harmonic characteris cs, even when their
RF spectrum environment in a peak capture
fundamental frequency lies within a legi mate band alloca on. The radiated harmonics will fall
mode over a period of me, equal to the
outside of legal band alloca ons, thereby providing addi onal opportuni es for the detec on and
run me capture me period, allows the
iden fica on of harmonic events. 
technical operator, to not only detect, but
clearly iden fy the presence of Frequency Digital Signal | Display and Capture
Hopping Spread Spectrum (FHSS) signals, even
Wi‐Fi, Bluetooth, ZigBee, FHSS, BPSK, DSSS, OFDM, ATSC, NTSC, GSM, CDMA, LTE, FSK, OOK, and
when opera ng at, or near the ambient noise
many other signals types, can be captured, displayed and analyzed visually, and via IQ Capture
floor. O en, the signal will hop at a rate that is
(Advanced Digital Protocol Analy cs (ADPA) TM is currently under development). 
difficult to observe within the Real‐Time Event
(RTE) trace, but will be easily iden fiable using So ware Programming and Opera on Manual (SPOM) TM
the peak capture mode. 
The Kestrel TSCM ® Professional So ware includes, excellent Canadian technical support, and a
MIN‐MAX | Peak Reference Trace detailed So ware Programming and Opera on Manual (SPOM) TM. Our manual provides advanced
informa on for each feature, along with working examples, making it an excellent reference and
The MIN‐MAX reference trace locks, and
training resource. Our 5‐Day resident and non‐resident Kestrel ® Cer fied Technical Operator (CTO)
displays the minimum and maximum peak TM
Program (recommended), includes our Technical Analyst Cer fica on (TAC) TM training, allowing
reference data, separate from the Peak
technical operators to gain the maximum benefit from their so ware investment. 
Envelope Capture (PEC) TM trace. 

TDSA TM Reference Trace

TDSA TM | Time Block Peak Trace Reference
TM
When run me TDSA is enabled, this peak
hold reference displays only the | PEAK | for
the current TDSA TM me block | PERIOD |,
and automa cally resets, with each operator
defined me block, providing a real‐ me, peak
hold component during the run me process,
that is me sensi ve against the PEC TM, or the
MIN‐MAX peak reference trace. 

Kestrel TSCM ® Professional So ware | Advancing the Art and Science of Technical Security
22 | Key Features
DSA Trace Count Limit | Trace Time Limit Automa c Measurement and Collec on System (AMCS) TM | OPT AMCS

The Kestrel TSCM ® Professional So ware The AMCS TM component within the Kestrel TSCM ® Professional So ware allows the applica on to
supports operator defined run me DSA TM trace operate “headless” in an embedded compu ng environment, significantly reducing the required
count ( me) limit automa on. This feature memory footprint and processing overhead. AMCS TM is perhaps described as one of the most
allows the operator to complete other powerful features ever developed for professional deployment requirements, and is configured by
inspec on related tasks, while the Kestrel ® the technical operator, with a Kestrel ® Configura on Script (KCS) TM file. The Kestrel ® applica on will
so ware stops (locks) run me collec on a er automa cally generate the project files and run me configura on, to be able to immediately begin
comple ng the specified number of Differen al collec on and operator defined “reporter” ac vity. Client applica ons may be connected to the
Signal Analysis (DSA) TM traces (or me), for the Kestrel ® so ware via a TCP/IP socket interface connec on, to obtain the extracted data stream, and
current antenna collec on loca on.  basic configura on informa on from the applica on. A measure of control is also offered to client
applica ons. The AMCS TM comprises of a powerful sub‐system deep within the Kestrel ® applica on.
Event User Alarm | Ac vity Scheduler
“Reporters” include both TCP/IP streaming, and the ability to write to the host sub‐system
DTL TM is supported by an event process alarm simultaneously, or independently. Our SDK provides an open‐source API, that includes a graphical
that no fies the operator when the DSA TM Data Visualiza on Interpreter (DVI), and console mode to recover, process and display the TCP/IP
collec on for the current antenna loca on is stream. An open source API and SDK is available to AMCS TM licensed end‐users.
complete. The operator can manually over‐ride
AMCS TM Licensing Ac va on
the locked status and con nue collec on, or
relocate to the next DSA TM Loca on. This On ini al connec on of a supported receiver with Kestrel ®, a license key request must be generated
feature is part of the Ac vity Scheduler and can in the form of a Challenge and Response (CRC) TM code, and submi ed to technical support by the
be programmed to respond to any scheduled technical operator. The CRC code is provided to the Technical Support (TSG) TM of Professional
events, programmed by the operator.  Development TSCM Group Inc., and converted into an AMCS TM specific Ac va on Security Key
(ASK) TM license, enabling the AMCS TM capability. This process is necessary, even if the so ware
DSA TM ICON | Antenna Loca on
currently is enabled with a valid license Comprehensive AMCS TM programming and deployment
The ability to change the displayed colour of any documenta on is available. 
DSA TM ICON is supported, allowing the technical
AMCS TM | Kestrel ® Configura on Script (KCS) TM
operator to edit the default colour
representa on of the DSA TM trace and ICON. The AMCS TM sub‐system allows the Kestrel ® So ware to be operated in a stand‐alone fashion. A
This is an important ability when impor ng configura on file allows autonomous collec on to be set up and ini ated on applica on start. Client
historical trace compara ve data from another applica ons can then connect to Kestrel ® and obtain con nuous TCP/IP measurement data. 
Kestrel Project File (KPF). 
1 | Remote Spectrum Surveillance and Monitoring (RSSM) TM | Se ng up a kestrel ® instance and
Mul ple Run me Instances of Kestrel ® receiver at a remote loca on, permits a con nuous monitoring data feed, that can be obtained at a
secondary monitoring loca on. Kestrel ®, opera ng in this mode is suitable for opera on on an
The ability to run mul ple instances of the
embedded PC pla orm, providing a low‐cost, and very powerful remote RF monitoring solu on. 
applica on is supported, allowing the technical
operator to maintain an ac ve run me session, 2 | Data Feed Integra on | The remote feed configura on, u lizes an open "xml" style format
and work with one, or more historical files allowing easy integra on with addi onal data feeds, to provide a richer data stream, and permits the
outside of the run me instance, for review, synthesizing of mul ple sources into a single data feed. 
analysis, or report genera on on the same host
3 | Alarm and Aler ng Integra on | The integra on of the AMCS TM capabili es with the unique
computer. 
alarm and aler ng architecture within Kestrel ®, provides the capability of obtaining RSSM TM data,
Communica on Receiver Mode (CRM) TM when specific events of interest occur within the ambient RF spectrum environment, thereby
reducing the data transmission load, and providing advanced ac onable intelligence rela ng to
The normal prac ce is to establish a Kestrel
spectral ac vity. 
Project File (KPF) TM, and then demodulate any
Signals of Interest (SOI) from within the run me 4 | Distributed (Managed) Remote Spectrum Surveillance and Monitoring (RSSM) TM | Integra ng
environment. However, it is also possible to mul ple instances of Kestrel ® with AMCS TM and integra ng their independent data feeds, ensures
simply open the applica on window, and that powerful RSSM TM solu ons can be easily implemented at the facility level, or across na onal
directly enter the Center Frequency (CF), and and interna onal geographical collec on loca ons. 
ac vate the demodula on and visualiza on
5 | Black Box Integra on | The ability to u lize RF spectra as a sensory input to an exis ng black box
process to listen, and visualize the signal. The
system, or build powerful analy cal solu ons can be realized, when the AMCS TM data feed is
ability to playback Kestrel IQ (KIQ) TM or IQ
combined with other sensory inputs, including GPS, speed, al tude, temperature, RF interference
captured as CSV files, is supported at any me
detec on, and other required end‐user parameters. 
with, or without an ini alized receiver. 

Kestrel TSCM ® Professional So ware | Well Posi oned to Hunt in a Complex Signal Environment
23 | Key Features
IQ Recording | IQ Playback | IQ Loop Kestrelnet TM
| Autonomous Measurement and Collec on System (AMCS) TM
The operator is able to Record, Playback, Loop, The Kestrel TSCM ® Professional So ware, and the Autonomous Measurement and Collec on
invoke Time Reference Sub‐Sampling (TRSS) TM,
System (AMCS) TM in combina on, provide the means for the advanced Kestrelnet TM
capability, a
and save the new file during run me, and post
diverse remote surveillance applica on for defensive and offensive mission specific requirements,
review and analysis. Controls for | RECORD IQ |
for government en es, regulatory compliance, law‐enforcement, correc ons environments, and a
PLAYBACK IQ | LOOP IQ | TRSS IQ | SAVE AS |
range of military applica ons across securely encrypted private communica on networks. 
controls are located within the Demodula on
Visualizer control group. | RECORD IQ | writes
the IQ sample as a proprietary | Kestrel IQ |,
| RAW CSV | or | WAV IQ | file format, with a
dynamically forma ed File Naming Conven on
(FNC). The | PLAYBACK IQ | capability allows
the operator to select a previously captured
historical | KIQ |, | CSV | or | WAV IQ file, and
invoke IF visualiza on, and demodulated audio
content | PLAYBACK | within the Demodula on
Visualizer control group, without a an SDR radio
connected. The | LOOP | feature, allows the
IQ sample to run as a repea ng | LOOP | to
enhance operator analysis (visual and audio
content). Our Dynamic Source Transfer (DST) TM
technology supports the capability of the opera‐
tor to “hand‐off” between live search receiver Typical TSCM Remote Spectrum Surveillance and
audio, and the historical IQ file. 
Monitoring (RSSM) TM Deployment Profile
RAW CSV IQ | Conversion U lity
Kestrel TSCM ® Professional So ware | Deployment Methodology
The so ware includes the ability to convert the
| RAW CSV | IQ files to the more efficient, The Kestrel TSCM ® Professional So ware addresses a major capability gap, by delivering excep onal
value, and a full featured, operator centric, and work‐flow oriented applica on that is scalable,
proprietary Kestrel IQ (KIQ) TM format, allowing
flexible and responsive to changing mission requirements. 
the operator to convert the larger format files
to smaller working files for playback and 1 | Deploy | Agile so ware with extensive TSCM specific features for tradi onal operator assisted
storage. The RAW CSV files can o en be Radio Frequency (RF) analysis; Una ended, managed Remote Spectrum Surveillance and Monitoring
manually reforma ed (edited) for compa bility (RSSM) TM; Basic Test & Measurement; Educa onal Ins tu ons and Training environments; Spectrum
with third‐party IQ analyzer resources. Op on Analysis and Complex Signal Analy cs; Tes ng and Evalua on of offensive Technical Surveillance
AEC TM adds the ability to trigger IQ samples.  Devices (TSD), and other RF emi ers. 
Bluetooth and WI‐FI Detec on 2 | Detect and Capture | Run me capability of days, weeks, or months; Capture spectrum data for
The ability of the Kestrel TSCM ® Professional real‐ me and post‐event analysis and review; Manage long‐term storage of spectrum data. 
So ware to acquire and display WI‐FI and 3 | Analyze and Iden fy | Live View Analysis (LVA) TM func ons in parallel with real‐ me data
Bluetooth signals within the immediate target collec on; Differen al Signal Analysis (DSA) TM; Time Differen al Signal Analysis (TDSA) TM; Receiver
area enables the technical operator to Differen al Signal Analysis (RDSA) TM; Run me and post event analysis, historical file review, with
determine whether a signal originates from trace import capability; Export data for post event analysis, u lizing other available resources. 
within the target area, or from outside, locate
the emi er, and verify its origin and purpose. 4 | Confirm | Audio and NTSC Video Demodula on capability and real‐ me visualiza on and analysis
The Waterfall Display (WFD) verifies the of Signals of Interest (SOI) events. 
presence of WI‐FI and Bluetooth emi ers 5 | Locate | Emi er localiza on is simplified u lizing a Rela ve Signal Strength Indicator (RSSI) value
opera ng within the ambient spectrum and basic Radio Direc on Finding (RDF) techniques. 
environment. The Kestrel ® Channel Profile
Mask (CPM) TM provides the technical operator 6 | Neutralize | Quickly neutralize, and poten ally exploit hos le emi ers. Termina ng the threat is
with a clear channel occupancy pa ern, down the top priority, analyzing intelligence and exploita on is generally a secondary considera on. 
to the channel level for easy analysis.  7 | Report | Generate custom, run me, or post capture, session reports with support for images,
photographs, and floor plans, internally generated as an exportable PDF file. 

Kestrel TSCM ® Professional So ware | Advancing the Art and Science of Technical Security
24 | Key Features
Air Gap Licensing Model | Classified Machines

To meet the mandatory security requirements

of many law‐enforcement, government, military
and na onal security organiza ons, our
So ware Development Group (SDG) TM has
implemented an “air gap” licensing process for
both genera ng the Challenge and Response
(CRC) TM string and the return Ac va on
Security Key (ASK) TM required to ac vate
the so ware. The “air gap” solu on adds a QR
code generator as part of the CRC key request
process. The technical operator generates a QR
Air gap license ac va on can be
code, rather than the CRC string. A mobile
accomplished on a mobile device
device (smart phone), with an op onal QR code
reader, can decode the CRC string and send it using our integrated QR code
via the mobile device, crea ng a secure “air licensing capability.
gap” process. Alterna vely, the operator can
use the mobile device camera to take a picture Understanding Licensing Op ons
of the displayed QR code, and email the file to
technical support for processing directly from th The Kestrel TSCM ® Professional So ware licensing model provides all updates, new releases, and free
email based technical support within the same genera onal so ware version (v1.0xx, 2.0xx and 3.0xx),
mobile device. The returned ASK TM can be
for example.
emailed as a QR code image to the “air gap”
mobile device. The target computer camera can Most of the key so ware func onality is included as standard features within the base so ware (OPT
then be used to read the ASK QR code image KTP). However, a number of op ons add significant mission specific capability for specialized deploy‐
and import the key directly, comple ng the ment requirements.
licensing process. To illustrate this capability,
Base So ware
the QR code on the right can be decoded with a
QR code reader APP installed on a smart phone.  Kestrel TSCM ® Professional So ware (Dual Radio Ready)| OPT KTP | Call ComSec LLC for Pricing
There re many free QR Code readers available  Addi onal Radio | Ac va on Security Key (ASK) TM | OPT ASK | Call ComSec LLC for Pricing
for download. Give it a try using the displayed Available Op ons
QR code example. This eliminates the need to  Automa c Export Control (AEC) TM | OPT AEC | Call ComSec LLC for Pricing
cut and paste or transfer the CRC and ASK by
 Command Line Programming (CLP) TM | OPT CLP | Call ComSec LLC for Pricing
hand to ac vate classified computers. 
 Autonomous Measurement and Collec on System (AMCS) TM | OPT AMCS | Call ComSec for Pricing
USB Media (CRC | ASK) Transfer  Tap Capture Plot (TCP) TM | OPT TCP | Call ComSec LLC for Pricing
In the event that the target computer is not  Dynamic Trace Autonomous Pla orm (DTAP‐GPS) TM | OPT DTAP‐GPS | Call ComSec LLC for Pricing
permi ed to be connected to the network. USB
media can e used to transfer the CRC and ASK Advanced Cer fied Technical Operator (CTO) TM Training
from and to the machine. Other removable
Receiving Cer fied Technical Operator (CTO) TM training is important as it significantly enhances
media such as an SD card may also be u lized operator knowledge and proficiency in deploying the so ware and many new technology features
where permi ed.  within a modern moving target threat model.

Resident Training Centre (RTC) TM

 Virtual Classroom Training Kestrel TSCM Pro Software | Cer fied Technical Operator (CTO) TM
Addi onal nights of accommoda on may be | OPT CTO | At Your Location | Minimum of Six Students Per Class | Call ComSec LLC for Pricing
required to accommodate training planning. 

Kestrel TSCM ® Professional So ware | Advancing the Art and Science of Technical Security