Spectrum Analyzer with Kestrel TSCM® Professional Software

RF Spectral Display (RSD) features numerous additional functions developed specifically for TSCM operators. It enables real-time emission evaluation and post-inspection analysis with scan data storage. Any number of Ranges of Interest (ROIs) can be displayed in parallel.

The operator has a wide variety of data visualization and graphical manipulation options available, including a Real-Time Event (RTE) trace, a Peak Envelope Capture (PEC) trace, and a Spectral Average (SAT) trace—all useful for improving Probability of Detection (POD). The operator can show or hide the RF Spectrum Display (RSD) at will, without interrupting or affecting automatic data collection and processing in any way.

Multiple Spectrum Bands—the ability to define distinct frequency bands or ranges of interest and assign a dedicated window to display their spectral information—is another unique feature not found in competing TSCM applications. Each operator-defined frequency range can be displayed on the display as a standard Windows tab, or on a dedicated monitor in a multi-monitor setup.

Water Fall Display (WFD) is particularly useful for detecting and examining short-duration signals, including Frequency Hopping Spread Spectrum (FHSS) and other burst signals, thanks to its memory function. Even the shortest-duration signals can be reliably detected and their temporal relationships examined.

Zoom to Peak (Time) – the ability to zoom in on the most intense signal event in the time domain within the Waterfall Display (WFD) – provides the operator with crucial analytical information, particularly when intermittently periodic signal events occur during extended acquisitions.

Real-time analysis of continuous and periodic signals—Live View Analysis (LVA™)—is a supported function without interrupting data collection. Both the Spectrum View and the Waterfall View are recorded continuously, allowing the operator to utilize Real-Time Analysis.

The LVA™ function allows the operator to analyze and review continuous and intermittent signal events in real time, offering the ability to graphically navigate to any signal during the scan. The operator can move forward and backward, analyzing signals trace by trace for absolute analytical accuracy. Additional tools allow the operator to pinpoint the most intense Signal of Interest (SOI) event, and the integrated Positional Zoom Control (PZC™) function and trace display options ensure clarity and precision in characterizing any recorded event, both during real-time acquisition and in the subsequent analysis phase.

Active Threat Detection Algorithm – includes several threat detection modes: i) Minimum Detection Amplitude (MDA™) with MDA lifecycle management; ii) Spectrum Baseline Logging (SBL™); iii) Dynamic Alert Annunciator (DAA™); iv) Harmonic Signature Threshold (HST™); and CTM™ – Chirp Threat Mode for analog audio transmitters.

The HST™ Harmonic Signature Threshold feature allows the operator to capture and flag harmonic relationships based on the detected fundamental signal. Kestrel Learning Mode (KLM) offers advanced AI-based statistical threat modeling and a powerful burst detection model.

Signal Combining Technology (SCT™) detects and reports broadband signal events based on predefined or operator-defined parameters. When the operator-defined MDA™ Minimum Detection Power limit is exceeded, often only a portion of the signal is acquired. This results in fragmented signal acquisition and multiple entries in the signal list. SCT™ solves this problem by detecting these fragments and automatically combining them into a single signal, defined by the center frequency and bandwidth. Incorrect acquisitions are marked as ignored and identified as such in the MDA™ signal list.

The application integrates elements of Artificial Intelligence and Machine Learning, but it is more accurately described as a form of “intuitive automation” that incorporates over forty years of field experience. Intelligent Signal Combining Technology (SCT™) represents the first step in accurately characterizing broadband signals of interest (SOI). SCT™ functionality supports the precise acquisition, measurement, and display of broadband signals, eliminating disruptive signal-level noise fluctuations by identifying and recording events, which are then submitted for operator review.

Spectrum Baseline Logging (SBL™) allows for the quick capture of a baseline trace and corresponding signal list. This feature is designed to capture a clean signal list, without any active threat detection. The operator can quickly capture a list of all signal events in the detection area, based on the operator-defined Above Ambient Noise Floor (AANF™) threshold. The operator has the ability to save and delete the generated signal list for each detection area with the Location Differential Signal Analysis (LDSA™) feature. Exported SBL™ signal list data is saved in CSV format and can be viewed using the Session Report Generator (SRG™) and Advanced Report Generator (ARG™) tools.

Kestrel Reference Traces (KRT™) – Instantly acquire, view, and export any number of traces onto the current spectrum display. KRT™ files can also be imported from a local, operator-managed database, allowing you to view progressive acquisitions as a reference overlay.

Tap, Capture, and Plot – Tap Capture Plot (TCP™) – visualizes RF signals using dimensional modeling of RF propagation. This feature was introduced as a specific feature for TSCM. The TCP™ option includes the ability to import any type of image, including floor plans, maps, 3D renderings, as well as Operator Defined Target Area (ODTA™) and Extended Functional Target Area (FTA™) images and photographs.

The ability to generate geolocalized heat maps allows you to highlight all distributed energy sources in relation to their location. The automatic localization sequence manages the entire acquisition and visualization process, based on the acquisition points selected by the operator. TCP™ allows the operator to “see” RF signals thanks to RF Visualizer (RFV™) technology.

A key feature of the Tap Capture Plot (TCP™) function is the ability to survey both horizontally and vertically to determine the relative field strength in the areas adjacent to, above, and below the Operator Defined Target Area (ODTA™) and within the extended Functional Target Area (FTA™).

The TCP™ function allows you to evaluate TEMPEST emissions from video monitors, office equipment, computers and audio-visual systems.

Kestrel’s thermal mapping and geolocation capabilities can be used to identify all emission sources within the Operator Defined Target Area (ODTA™) and those radiating signals toward the extended Functional Target Area (FTA™). The video decoder can be used to verify whether signals containing intelligence contain recoverable visual content.

Automatic Threat List (ATL™) – The ATL™ sidebar provides signal list viewing during scans and for post-inspection analysis, with all signal list data exportable to CSV format. Signal list data is also available for inclusion in the SRG™ Session Report Generator and the ARG™ Advanced Report Generator.

The ATL™ sidebar provides an instant report of all discrete signals identified and acquired automatically and manually by the engineer, including frequency and signal level, with the ability to view harmonic ID, dBc and dB ANF values.

Master Automatic Threat List (MATL™) – The separate main ATL™ window provides comprehensive signal information, including any harmonic relationships, frequency (MHz), signal level (dBm), estimated bandwidth, dBc, dB ANF, dBm NF, average dBm, minimum dBm, Chirps, Detected Chirps, Chirp Tests, detection date and time, and location details.

Differential Measurement Tool (DMT™) – Our DMT™ allows you to quickly determine the difference in frequency, dBm, and time. The DMT™ resource is available for the Real-Time Events (RTE), Waterfall Display (WFD), and Differential Signal Analysis (DSA) control groups and is implemented within the Demodulation Viewer for audio oscilloscope viewing.

Automatic Export Control (AEC™) – enables programmable automatic export of signals and adds automatic IQ data logging.

The software can be used for remote monitoring and allows periodic export of all or recently detected signal events based on user-defined time or trigger parameters. The ability to define the signal list elements automatically exported in CSV format provides immediately actionable RF information. The AEC™ option also offers powerful trigger-based IQ capabilities and allows separate export of spectra and RSSI (Received Signal Strength Indicator) power values ​​in CSV format.

Command Line Programming (CLP™) is a feature designed for remote or large-scale radio monitoring. The system allows you to define custom network alerts via email and SMS, activate system features (such as Smart ECM), and interface with virtually any software, including third-party applications for demodulation, decoding, and analysis. Operators can configure specific audio alerts within the application and automatically generate screenshots in response to detected events.

The Dynamic Alert Annunciator (DAA™) offers the ability to create an unlimited number of user-defined alerts across the spectrum. It enables automatic and unlimited detection of signal events across multiple research receivers or analyzers, covering multiple bandwidth allocations or any user-defined Band of Interest (ROI).

The visual (Red/Green) and audible warning system provides immediate “YES/NO” notification for real-time monitoring of SCIF facilities and environments. Signal loss and threshold violation detection—with subsequent alert generation—can be configured independently to support advanced analytics. Each alert zone is an autonomous detection unit, capable of operating in operator-defined absolute and relative modes across the entire spectrum.

Demodulation, Display and Recording for AM, FM and SSB audio. Display includes RF Spectrum, Spectral Density, IQ Graphs, IQ/Time Graphs, RSSI History, Analog RSSI, Audio Oscilloscope, Audio Frequency Spectrum, and NTSC video display and decoding.

Demodulation Control – The demodulation control group in the sidebar provides all the shortcuts you need to quickly select signal events and activate the demodulator. This can be done manually or with drag-and-drop technology, which is available from all spectrum analysis tools. Flexible software demodulators are included for AM, FM, SSB (USB | LSB), and CW signals, as well as a Morse code decoder. Demodulation settings, including Center Frequency (CF), IF Bandwidth (IFB), and Center Frequency Step, make the demodulation process simple and intuitive.

Demodulation Viewer – The demodulation viewer provides the operator with analytical-quality graphical representations and a variety of audio-specific filter options to optimize demodulation performance for the signal of interest. Demodulated signals (audio and IQ) can be recorded, played back, and examined using various real-time views. Viewing capabilities included in the demodulation control group include: RF Spectrum; Audio Spectrum; Heat Map; 3D IF-FFT Spectrum (3D Waterfall); IQ Plot; IQ Over Time; RSSI History; Analog RSSI; Audio Oscilloscope; and AF Spectrum (Audio Frequencies).

The included Audio Oscilloscope Display (OSD) provides a visual time-domain representation of demodulated signals and offers various tools. The ability to decode unencrypted Morse code transmissions (CW mode) and display the information directly on the user interface is supported.

NTSC | PAL Video Demodulation – Decoding, displaying, and analyzing analog video signals. The video decoder window provides signal metrics and allows sampling of amplitude- and frequency-modulated signals in NTSC and PAL formats.

IQ Recorder – The most important component of the demodulation viewer is the ability to manually capture IQ data, play back IQ, loop IQ, and perform Time Reference Sub-Sampling (TRSS™). Audio and IQ samples can be used to develop a signal recognition database, for training purposes, and as definitive proof of the presence of hostile signals. The ability to capture Kestrel IQ (kiq™), IQ csv, and IQ wav files offers mission-specific options for the operator. Additional IQ playback modes include IQ xml, dgzm, and dgz formats.

Quick Capture | 10 sec KIQ – The operator can initiate IQ acquisition during the demodulation process with the press of a single button. This feature allows for the capture of events that may otherwise end quickly, before the operator can manually select an option from the IQ recording menu.

Location Differential Signal Analysis (LDSA™) technology allows the operator to manually acquire spectrum data for direct comparison between emissions at different locations. Comparing emissions at different locations is no longer sufficient for modern risk scenarios, but this technique remains a viable option when used in combination with time- and radio-parameter-based differential methods.

Time Differential Signal Analysis (TDSA™) – a feature that allows the operator to generate spectral traces based on scan durations for direct comparative analysis.

AI-Based Learning Capabilities – AI-based machine learning adds significant statistical and algorithmic modeling capabilities to existing threat detection. It provides a new method for detecting signal bursts present among signals encountered in a modern, broadband signal-rich environment.

Most TSCM equipment relies solely on threshold-based detection models, failing to consider that modern hostile signals can easily evade this outdated, Cold War-era approach. Kestrel ^TSCM® software takes a unique and different approach. Advanced statistical modeling capabilities add a layer of threat detection capability that proactively adapts to an ever-evolving threat detection technology environment.

Exceed Detect Model (EDM™) – Signal detection based solely on exceeding power limits, as found in the vast majority of TSCM products, no longer meets any acceptable level of diligence in today’s evolving threat landscape. Detection based solely on exceeding power limits can only detect 40 to 60 percent of the signals presented across a wide bandwidth.

Kestrel ^TSCM® software uses advanced techniques to overcome these limitations. It includes an advanced Outrun Detection Model (EDM™) and Burst Detect Model (BDM™), which include a spectrum training mode that can automatically respond and update the detection model based on the specific ambient RF spectrum.

The combination of overshoot and burst detection parameters can be defined by the operator to work in tandem or independently, to achieve mission-specific results. The initial training interval is defined by the operator, relative to all available traces, defined by the Kestrel Reference Trace (KRT™) count. This allows the software to build and maintain a complex, autonomous threat detection strategy. The EDM-KRT fusion functionality allows the operator to include a second layer of AI-based machine learning as a starting point in the threat detection process.

Burst Detect Model (BDM™) – Kestrel Learning Mode KLM™ supports operator-controllable ultrafast burst detection.

The Burst Detect Model (BDM)™ can be integrated with the Exceed Detect Model (EDM)™ to capture signals that models based on power exceedance alone cannot detect, or it can be used independently.

Spectral Energy Direction Finding (SEDF™) – a directional localization tool, based on the spectral energy localization of both broadband and narrowband signals of interest.

Session Report Generator (SRG™) – An integrated report generator and project management framework, it enables reporting with an unparalleled level of detail.

The fully integrated Session Report Generator allows for the immediate, real-time generation of customizable reports in PDF format. It allows the operator to capture screenshots of the data displayed via Spectrum Display (RSD) and Waterfall Display (WFD) for inclusion in the report. This feature allows for the export of a complete RF report, which can be used as an attachment to final user documentation. Threat or signal lists can be exported in CSV format for editing or analysis using third-party software.

Advance Report Generator (ARG™) – a standards-based, customized reporting resource that allows you to combine all aspects of your mission into a single, automated, professionally structured and formatted document.

The document tree structure, drag-and-drop technology, and automatic formatting tools allow the operator to define section-specific information and include cover pages, logos, data tables, images, photographs, spectral graphs, text, sections, headers and subheadings, as well as automatic page numbering, adapting to any required report layout and format.

Operator Deployment Log (ODL™) – The ODL™ is an integrated virtual digital assistant that allows the progressive entry of time-stamped notes from the start to the end of the job. The ODL™ functionality resides at the project level and is available during post-inspection analysis and for report preparation. The ODL™ Operator Deployment Log also accepts automatic entry of operator-completed tasks with the Inspection Summary Checklist (ISC™) functionality. The ODL™ Operator Deployment Log can be used as a standalone tool or in conjunction with the Inspection Summary Checklist (ISC™).

Inspection Summary Checklist (ISC™) – A multi-tabbed, operator-configurable checklist for use on specific missions, real-time checklist creation, and import of any number of pre-configured checklists. The Inspection Summary Checklist offers integration with Operator Deployment Log (ODL™) technology for automatic entry. The functionality can be used independently or in conjunction with the ODL™ technology.

ODL™. Operators can download a sample database from the Kestrel Technical Support website.

Kestrel Central Visualizer | Kestrel Central Visualizer (KCV™) | Remote Radio Management (RRM™) – optional OPT KCV-RRM modules. The KCV-RRM™ platform can be installed throughout an entire facility or deployed on critical infrastructure components within a larger facility.

The KCV-RRM™ platform can provide random, periodic, targeted, or 24/7/365 monitoring coverage. Kestrel Central Visualizer (KCV™) provides remote radio management (RRM™) across a network of master and satellite access points, fully integrated with the Kestrel ^TSCM® software application.

The KCV-RRM™ platform provides secure access to one or more server-integrated radios, remotely managed and connected to an end-user-provided platform or a custom, pre-configured Linux-based server that forms the basis of a Remote Radio Management (RRM™) resource.

The KCV-RRM™ platform supports both mobile and fixed deployments, as a standalone data collection platform or as a powerful remote C2 resource.

Event Task Scheduler | Controller – The software includes an operator-defined event task scheduler that can be used to independently start and stop scanning of any spectrum band on any radio to control any number of spectrum acquisition tasks. This feature is accessible during the current project setup wizard and provides a quick way to define basic event tasks.

Advanced Next-Generation Task Scheduler | Controller – The software also includes a next-generation advanced event task scheduler (mission controller), accessible within the application, which enables advanced planning of complex event patterns, their creation, modification, reordering, and deletion, on any type of radio hardware at runtime and across all independent spectrum bands operating with multiple radio hardware.

Autonomous Measurement and Collection System (AMC™) – optional OPT AMCS™ module. The AMCS™ option offers experienced operators the ability to create a multi-site remote monitoring platform with TCP/IP protocols.

This functionality relies on the end-user remote client. The AMCS™ option includes an SDK with documentation, code samples, and remote client examples that can be managed from both the console and graphical applications.

The entire platform is based on simple scripting technology that can be programmed to stream all measurement parameters over a TCP/IP network connection or, alternatively, to store them on the remote host computer.

Dynamic Trace Autonomous Platform (DTAP-GPS™) – optional OPT DTAP-GPS module. This extension automates the Tap Capture Plot (TCP™) function, displaying RF propagation modeling on color maps. This option provides a fully autonomous, GPS-based capture process for geolocated RF data for terrestrial, airborne, and space applications.

It can update interactively with a real-time moving map provided by the Internet, or it can operate on a static reference image. DTAP-GPS™ is used to acquire and track a Range of Interest (ROI) of the ambient RF spectrum over large areas, by moving on foot, by car, by helicopter/plane, or by positioning the system on a drone.

The ability to include multiple bands of interest, such as control and communication channels, uplink and downlink spectrum blocks, etc., is supported.

Once the DTAP-GPS™ has been programmed by the operator, OneTouch™ technology starts a completely autonomous data collection process, allowing the operator to concentrate on walking, driving, flying, or piloting the drone.

OneTouch™ technology allows you to pause and restart the DTAP-GPS™ process during the mission.

Kestrel GOV Professional Software (Government Only) – The Government-only version has numerous SIGINT features and additional TSCM capabilities.

• Kestrel TSCM™ Professional Software
• Kestrel Lightning (KL Series) RTSA-SDR Spectrum Analyzer 9 kHz to 9.5 GHz 100 MHz RTSA Bandwidth
• Kestrel Lightning (KL Series) RTSA-SDR Spectrum Analyzer 9 kHz to 22 GHz 100 MHz RTSA Bandwidth*
• Kestrel Lightning (KL Series) RTSA-SDR Spectrum Analyzer 9 kHz to 40 GHz 100 MHz RTSA Bandwidth*
• HP Omnibook X Flip 2 in 1 Laptop PC 16″ OLED display
• Omnidirectional antenna
• USB Hub
• Removable buffer battery

* One or two SDR radios to choose from three versions

• Hawk-Eye Optical Probe Kit for communications analysis with ultraviolet, visible, and infrared light
• Kestrel 3D Energy Probe for analyzing live electrical wires and VLF frequencies
• KestrelPod III Omnidirectional and Directional Antenna Kit

• Kestrel TSCM ® Professional Software
• Radio Kestrel Lightning RTSA-SDR Spectrum Analyzer from 9 kHz to 9.5 GHz
• Laptop PC 2 in 1 HP Ominibook X Flip 16″ OLED display
• Carbon fiber houses
• Backup battery
• USB Hub
• Omnidirectional antenna
• Users Manual

* Typical composition

The spectrum analyzer is exempt from sales restrictions within the European Union. The government version is reserved exclusively for government agencies.