All Areas

877.445.5362

San Antonio

210.846.9432

Computer Forensics San Antonio

EXHIBIT A
COMPUTER
FORENSICS

& Data Recovery

Computer Forensics San Antonio

EXHIBIT A
COMPUTER
FORENSICS

& Digital Forensics

Computer Forensics San Antonio

EXHIBIT A
PHONE
FORENSICS

& Data Recovery

EXHIBIT A
EXPERT
WITNESS

& Digital Justice

Showing Slide 1 of 4
Computer Forensics San Antonio

Computer Forensics

Extract the missing data…
Computer Forensics San Antonio

Data Recovery

Recover deleted data…

Computer Forensics San Antonio

Private Investigations

License A16118

For plaintiff & defense counsel · Personal injury · Trucking

Was the phone in use at impact
or is that just the billing statement?

Exhibit A CFI reads carrier Call Detail Records the way a jury has to hear them: session by session, clock by clock, and only as far as the records will support.

Impact window — correlated clocks

14:17:02 Voice originate · 7m 41s · sector 3
14:21:18 SMS terminate · same line
14:22:06 Crash clock (EDR / CAD) Impact
14:22:11 Data session still open
14:23:40 911 from a different number

The record that settles — or explodes — a distracted-driving theory

Attorneys do not lose these cases because they lacked a phone bill. They lose them because someone treated a customer statement like a forensic CDR, ignored time zones, or claimed the handset was at the driver’s ear when the production only shows a line was busy.

Counsel usually needs one of three answers

  • Was there a voice, SMS, or data session on this line in the seconds around impact?
  • Do the carrier records match — or contradict — the device extraction and the crash report?
  • Is the opposing expert reading a bill, a CDR, or a tower dump, and did they overclaim location?

Why firms retain Exhibit A CFI

  • We work PI crash files as a timeline problem, not a slogan.
  • We parse what AT&T, Verizon, and T-Mobile actually produced — including gaps and date-through.
  • We will not write “the driver was texting” unless artifacts support handheld composition at that moment.
  • Same examiner can pull the phone, read the CDR, and take the stand.

A monthly bill is not a forensic CDR

This is the distinction that wins Daubert arguments and saves closings. We put it on the first page of every engagement so counsel is never surprised at deposition.

NOT ENOUGH

What you often receive first

  • Customer billing summary rounded to the minute
  • Screenshot of Recents from the handset
  • “No texts that day” on a line that uses iMessage / RCS / WhatsApp
  • A single sector treated as a street address
  • UTC stamped as local, or daylight-saving ignored

WHAT WE REQUEST

Forensic-grade production

  • Full call detail: originate / terminate, start, end, duration, disposition
  • SMS / MMS event rows (not message content)
  • Data session start / stop around the crash window
  • Cell site / sector identifiers and the carrier tower list
  • Certification, date range actually produced, and the record legend
Silence on a classic voice/SMS CDR is not proof the phone was unused. iMessage, RCS, FaceTime, WhatsApp, and in-app voice often leave little or no row on the carrier bill. That limitation belongs in the report — before the other side puts it in a cross outline.

Built for the files you actually try

Plaintiff counsel

Preserve early. Subpoena the right fields. Tie sessions to the crash clock from the police report, 911 CAD, EDR, or telematics. Show a connected call that starts before impact and is still up after. Flag a data session that the defense called “just music.”

Defense & carrier counsel

Show the empty window. Separate incoming rings from answered calls. Rebut an opposing report that treated a billing minute as handheld use, or a sector as a pin drop. Document what the production does not contain so the jury is not invited to fill the gap.

Auto & trucking

Impact-window analysis for passenger cars, 18-wheelers, and rideshare. Optional add-on: infotainment, CarPlay / Android Auto, Bluetooth device names from an extraction.

Rebuttal of the other expert

Method review of opposing CDR mapping, time-zone handling, and “the phone was here” opinions that the records will not carry.

Spoliation questions

Carrier rows that exist when the handset log does not. SIM / device changes after the wreck. Retention risk if no letter has gone to the carrier.

For Plaintiff Counsel

Establish the impact window

  • Preserve early and subpoena the fields the case needs
  • Correlate sessions to impact and 911 clocks
  • Identify calls or data sessions spanning impact
  • Explain phone artifacts without overstating the records

For Defense and Carrier Counsel

  • Separate incoming rings from answered calls
  • Identify empty windows and production limits
  • Correct billing minutes used as exact timestamps
  • Rebut a cell sector treated as a pin drop
  • Check opposing time-zone conversions

How an engagement runs

One matter. One signed engagement letter. No recycled captions from another file.

01

Preserve

Confirm the impact clock and flag carrier retention.

02

Inventory

Identify the CDR, legend, tower list, and missing dates.

03

Parse

Normalize time zones and carrier event fields.

04

Correlate

Align carrier, crash, vehicle, and device clocks.

05

Testify

Prepare readable exhibits and state the limits before deposition or trial.

Choose the scope that fits the evidence

CDR analysis

Best when the phone is unavailable or the immediate question is whether a line had voice, SMS, or data activity around a known crash time. We deliver a clear timeline and state the production date range, clock adjustments, and limits.

CDR + device extraction

When the handset is available, a forensic extraction can add screen activity, app artifacts, Bluetooth connections, and location points. We keep those findings separate from the carrier file until they are correlated on one timeline.

Questions counsel asks before retaining an expert

Retention varies by carrier and record type. If no preservation request has gone out, we flag that first. Send the crash date, carrier, and records already in hand so we can identify what is missing.

Yes. A request for “phone records” often returns a bill. We can identify the needed call detail, SMS event rows, data sessions, cell site identifiers, tower lists, record legend, and certification for counsel to request.

Only if the evidence supports that opinion. A carrier CDR can show a line event; it usually cannot establish who held the phone or prove message composition. We compare device artifacts when available and describe conclusions in language the records can support.

Yes. The method does not change with the case caption. We document what is present, what is missing, and where an opposing opinion goes beyond the production.

Exhibit A CFI is based in San Antonio and available across Texas, with other locations by arrangement. Remote deposition is also possible.

Send the crash time and its source, the carrier, and whatever production is already in hand. Call 877.445.5362 or email [email protected] for a free 30-minute attorney consult.

START WITH THE IMPACT TIME

Send the crash time. We will tell you if the records can answer it.

Have the impact time and its source, the carrier, and whatever production is already in hand. The first 30 minutes are free; no engagement begins until a letter is signed for that matter.

Exhibit A Computer Forensics Investigations · 100 NE Loop 410, Suite 540 · San Antonio, TX 78216 · License #A16118

msg_small_c_popup

SEND A MESSAGE

Let's have a chat