Eddy Wireless CMS-15 Manual de usuario

CMS-15

COUNTERMEASURES SET

INSTRUCTION MANUAL

The CMS-15 Countermeasures Set consists of the following instruments and

accessories:

1) TD-53 Advanced Transmitter Detector

2) P-01 Wideband RF Probe

3) P-02 Infrared Probe

4) P-03 Line Driver

5) P-04 Carrier Current/Video Camera Probe

6) TT-46 Advanced Wiretap Detector

7) Headphones

8) Various cords, adaptors and Padded Carrying Case

ABOUT THE TD-53

Size: 3.75” x 5.5” x 2”

Weight: 10 oz.

Battery: 9 volt alkaline- Use only alkaline batteries- carbon/zinc batteries will not give

satisfactory performance.

Current: 25 mA average.

Audio Output: Up to 100 mW, internal speaker or headphones.

Indicators:

METER – 10 step LED – Each step represents a 3 dB change in signal strength.

AUDIO – In the DETECT mode, an audible “click” will be heard. The clicking rate will

increase as the signal strength increases. In the VERIFY mode, audio picked up by

the bug may be heard. As the bug is approached, a high pitched squealing tone will

be heard.

Controls:

VOLUME – In addition to acting as the on/off switch, this control is used to change

the audio output level.

SENSITIVITY – Normally left in HIGH. The LOW position reduces the sensitivity by

12 dB.

MODE – In the DETECT position, a “clicking sound” will be heard in the speaker. In

VERIFY position, a squeal is heard if the probe is near a transmitting bug.

EARPHONE JACK – For non-alerting listening, use with 4 to 2,000 Ohm

headphones.

Probes: Several probes are available for the TD-53 that allows it to be used to locate

several different types of bugs. Currently available probes are:

P-01 - RF Probe, covers 5 MHz to 2.5 GHz.

P-02 - Infrared Probe, detects IR and laser bugs.

P-03 - Line Driver, detects hardwired microphones.

P-04 - Carrier Current and Video Camera Detector Probe.

P-01 SPECIFICATIONS

Frequency Response: Covers 5 MHz to 2.5 GHz. Most sensitive over the 30 to 170 MHz

range (this is where most of the bugs are).

GETTING STARTED

If the battery has not already been installed, install one now. Use an alkaline 9 volt battery.

To access the battery compartment, insert a flat blade screwdriver in the screwdriver slot at

the bottom edge of the front panel. The front panel will pop up. It may be necessary to

spread the sides of the case slightly. After installing the battery, replace the front panel,

pressing on its edges until it snaps into place.

Set the SENSITIVITY switch to “HIGH” and MODE switch to “DETECT”. Without the probe

plugged into the TD-53, turn the unit on. The meter should read “3” and a rapid clicking

sound will be heard. If the meter reads “2” or less, the battery is weak and should be

replaced for best performance. Turn the unit OFF.

Connect the probe by plugging it into the jack located at the hinge end of the unit. Be sure

the plug is completely seated in the jack. Now, turn the unit back ON. In low RF areas, the

meter will read “1” and a slower clicking rate will be heard. Extend the probe antenna to its

full length.

FINDING BUGS WITH THE TD-53

This section is not meant as a complete course on finding bugs, but it will give you some

idea of where to start and how to use the unit. We’ll be covering three main areas: the home

or office, telephones and vehicles.

HOME or OFFICE

Transmitters are frequently concealed in various household or office fixtures. The most

common are electric sockets or cube taps. In this configuration, normal AC power is

supplied directly to the transmitter which permits permanent installation. This means that all

lamps and appliances (radios, TV, clock, desk calculator, etc.) should be checked carefully.

Another type is the drop transmitter. These are used where quick installation is required.

Being battery operated, they have a finite operating life which requires that they be retrieved

for battery replacement or abandoned. These transmitters are often pre-concealed in

objects such as picture frames, pens, desk sets, cigarette lighters and ash trays.

Body transmitters are battery operated, usually with a higher output power than the drop

transmitter. They are designed to be carried into a target area on a person.

In using the TD-53 to find a planted transmitter, turn the unit on and set the VOLUME so

that you can hear the “clicks”. If you are in an area of high ambient RF (from radio or TV

transmitters), you may have to set the SENSITIVITY switch to “LOW”. Walk slowly around

the room while sweeping the probe (antenna) slowly up and down from ceiling to floor. Also,

turn on the various lamps and appliances as you come to them to activate any bugs that

may be wired in.

When an RF field is detected, the meter reading and clicking rate will both increase. (If

you’re very observant, you can hear an increase in the click rate before the meter steps to

the next level.) At this time sweep the probe from side to side to get a bearing on the

transmitter direction.

Once you have an idea of the area in which the transmitter is hidden, set the MODE

switch to “VERIFY” and turn the VOLUME up. Continue sweeping the probe. As you

approach the hidden transmitter a squealing tone will be heard. (If the increasing meter

reading was due to outside sources such as TV stations, this squealing will not be heard.)

At this point, you should have a good idea of where the bug is located. Conduct a physical

search, keeping in mind the information given in previous paragraphs.

In detecting a body transmitter, your subject would probably become suspicious if you

started waving the probe is his face. So, in a situation where a body transmitter might be

present, set up the unit ahead of time so that you or an assistant can observe the meter. (Of

course, you would keep the volume turned down.) The probe can be positioned up to 25’

away from the TD-53 by using an available extension cable. (For example - the probe could

be discreetly hidden in the target room, while the TD-53 is in another room.) If the meter

reading increases when your “friend” walks into the room, you’ll know to watch what you

say.

TELEPHONE

The telephone is suspect to many different eavesdropping attacks. Probably the best

policy is to not say anything over the phone that you don’t want the whole world to know

about. And, for goodness sakes, never say anything of a confidential nature over a cordless

or cellular phone.

Two basic types of radio bugs are available that will transmit both sides of the telephone

conversation. The series tap is installed in series with the phone line and draws its power

from the phone line. It can be installed inside the phone or anywhere along the line.

The parallel tap is placed across the line at any point or inside the telephone. It is usually

battery powered with the attendant limitations of battery powered bugs.

Both types can use the phone lines as an antenna and both are generally activated when

the phone is taken off-hook. To detect phone bugs with the TD-53, set up the unit as done

previously and fully extend the probe antenna. Place a call with the phone. (If you’ll dial the

phone’s own number, you’ll get a busy signal which can activate a VOX type bug.)

Then, sweep around the phone and its lines while watching the meter and listening to the

click rate. If these increase, hang up the phone. If they then decrease, you’ve got a pretty

good clue that you need to do some more checking. At this point, you would conduct a

physical search of the phone and phone line.

VEHICLES

While voice bugs can be installed in a vehicle, probably the most common type is the

tracking transmitter (bumper beeper). Most of these are the burst type which means that RF

is transmitted in short bursts rather than continuously.

These transmitters can be powered either by their own battery pack or by the vehicle

battery. The ones powered by the vehicle battery can have a much higher output power

and, of course, a longer useful life. The main advantage of the battery pack unit is that it is

very easy to attach.

To check a vehicle for bugs, turn the ignition on, but don’t start the engine. (Ignition noise

will thoroughly confuse the TD-53). Sweep around, under and inside the vehicle with the

probe.

Because of the limited brightness of the indicator LEDs, it would be better to do this away

from direct sunlight, if possible. Pay particular attention to the meter. Brief flashing at the

next higher level could indicate a bumper beeper.

SUMMARY & LIMITATIONS

The best way to become proficient with the TD-53 is to practice. A reasonable and readily

available practice transmitter is a child’s 49 MHz walkie-talkie sold by Radio Shack for $10

to $20 depending on the model.

For the most effective practice, get someone to hide the transmitter for you. The person

hiding the transmitter should be reasonable. As a practical matter, a spy is not going to hide

a transmitter inside a refrigerator or metal file cabinet. All that steel would cut down the

radiated signal.

Just tape down the transmit button, turn the unit on and have someone hide it. Then

practice finding the transmitter using both the DETECT and VERIFY modes.

One disadvantage of the TD-53 is that the clicking (in the DETECT mode) or the squeal (in

the VERIFY mode) can alert the eavesdropper that you’re on to him. For this reason, we’ve

provided an earphone jack (located on the side of the TD-53). Just plug in a set of

earphones and you’ll be able to hear the clicking in the DETECT mode with no trouble. In

the VERIFY mode, keep the volume turned down to protect your hearing in case a feedback

squeal is set up.

P-02 INFRARED PROBE

SPECIFICATIONS:

Field of View: 40 degrees

Spectral Peak: 940 nm (infrared)

Power Source: 9 VDC furnished by TD-53

THEORY:

Light beams, especially lasers, provide an excellent method for carrying audio intelligence.

The light beam can be visible or invisible (as in infrared). They can carry conversations for

long distances with most manufacturers claiming a range of several kilometers. And

importantly, modulated light attacks are often not considered by individuals performing

countermeasures checks. This can be a fatal oversight from a security standpoint.

The P-02 is a special probe, designed for use with the TD-53 Transmitter Detector, which

allows the technician to search for sources of infrared (IR) transmissions. In the case of

amplitude modulated or pulse frequency modulated sources, the technician can actually

listen and determine whether the beam is carrying voice or other intelligence.

Light beams carrying room audio can be very narrow. They can shoot through windows

and reflect off glass, metallic and other bright surfaces. This can be readily demonstrated

with a TV remote control device (IR). Try pointing it at different surfaces around the room

and notice how the TV can be controlled by reflections from some unusual places. Narrow

light beams are very directional (line of sight) – a point the countermeasures technician

should keep in mind.

Detection:

Insert the probe plug into the probe jack on the TD-53. Turn the Volume control ON and

set to about the 10 o’clock position. With the lens end of the probe covered, the LED meter

should read between 1 and 3. If the meter reads “0”, the TD-53 battery is weak and should

be replaced.

Any number of tests can be made to verify that the unit is working. In the Detect mode,

when the probe is pointed at incandescent or fluorescent lights, the meter will read upscale

and the “click” rate will increase. In the Verify mode, a hum or buzzing sound will be heard.

When sweeping for IR transmitters pay particular attention to window openings –

remember that light travels in a straight line. An unmodulated beam will cause the LED

meter to read upscale and (in the Verify mode) a rushing noise will be heard in the speaker

or headphone.

A modulated beam will also cause the meter to move upscale. In addition, some type of

audio will be heard in the Verify mode. Depending on the type of modulation, you will hear

either baseband audio or some type of tone. High speed data (above an audio rate) will give

a rushing sound.

The counter measures technician who disregards IR attacks does so at his/her own peril.

P-03 LINE DRIVER PROBE

ABOUT THE P-03

Size: 2.7” x 1.7” x 1.5”

Weight: 3 oz.

Power: Supplied by TD-53, 9 volts, current limited

Current: Limited to 8 mA maximum

Input impedance: 8K Ohms

Indications:

Red LED – Lights when more than 1.4 volts AC or DC is present on the wire pair

under test.

Green LED – When the Line Driver switch is operated, this LED glows if 400 uA or

more is being drawn by the wire pair under test. The more current that is drawn, the brighter

the LED will grow.

Controls:

LINE DRIVER/OFF – This switch applies a voltage to the wire pair under test to turn

on voltage activated microphones. Never turn this switch on if the RED LED indicated a

voltage present on the wire pair. If you do, the TD-53 and/or the P-03 may be damaged.

A/B – This switch reverses the polarity of the line connections for detecting DC

voltages and for reversing the polarity of the line driver voltage to aid in detecting polarity

sensitive devices.

THEORY

A common eavesdropping attack is the concealed microphone. This is simply a

microphone, hidden in the target area, which is connected by wire to a nearby listening post

(L.P.) or radio transmitter which relays the conversation to an L.P.

To find a concealed microphone during a countermeasures sweep, either the mic itself or

the wires leading to it must be found. This requires that all suspect wires running through or

adjacent to the target area be electronically inspected for the presence of room audio.

GETTING STARTED

On the P-03, set the LINE DRIVER/OFF switch to OFF. The A/B switch can be in either

position. Plug the P-03 into the probe jack on the top end of the TD-53. Plug the

headphones into the headphone jack on the side of the TD-53.

FINDING MICROPHONES

Detection of a concealed microphone and the L.P. to which it is connected can be a

tedious procedure, but is not technically difficult. Once audio is recovered on a wire pair, the

wire must be physically traced until both ends are found. Keep in mind that wires leading to

any loudspeaker in the target area (i.e. part of an intercom or Music system) can be

exploited by an eavesdropper. The reason is that loudspeakers can act just like

microphones. Use the following procedures to search for hidden microphones.

1. Turn on a sound source in the target room such as a radio. Next, turn on the

TD-53 and set the MODE switch to “VERIFY”. Ignore any indications on the LED meter.

Make sure the DRIVER switch on the P-03 is “OFF”.

2. Connect to P-03 alligator clips to the wires to be tested. If necessary, scrape

just enough insulation off the wires to expose them for the alligator clips. After the tests are

completed, cover the scraped areas with the electrical tape. NOTE: We DO NOT

recommend that you perform any tests with this equipment on AC power wiring.

3. Operate the A/B switch to both positions. If the red LED on the P-03 comes on

in either position, a DC voltage is present on the wire pair. If the LED is on in both positions,

an AC voltage is present. If a voltage is indicated, use standard safety procedures when

working with the wire pair. CAUTION: If either an AC or DC voltage is indicated, DO NOT

operate the DRIVER switch to the “LINE DRIVER” position.

4. Turn up the TD-53 Volume control to a comfortable level and listen for room

audio. If the line was “dry” (no voltage present), turn on the LINE DRIVER switch to apply

voltage to the wire pair. Also operate the A/B switch to both positions and listen for room

audio. Shield the green LED from room light and observe it for any glow of light. If you see

any light from this LED that means that current is flowing in the wire pair and a listening

device could be connected to the wires. The brighter the light, the more current that is

flowing.

5. Perform the above checks on any other suspicious wire pairs in the target

area.

6. FEEDBACK MODE for locating hidden microphones: Set up the test as

above, but don’t use the headphones. Turn up the Volume on the TD-53 to about the 3

o’clock position. If a hidden microphone is nearby, a feedback squeal will be set up in the

TD-53 speaker.

Once feedback is encountered, the hidden microphone can be located by reducing

the volume and pointing the speaker at different locations in the room.

NOTE: You should be aware that using the feedback mode to locate a hidden

microphone can alert the L.P. that the mic has been located.

7. A complete check of the target room would also include listening for room

audio on any telephone wires present. The reason for this is that a telephone can be

modified through a technique known as “hook switch bypass”. When so modified, the

telephone acts as a microphone and intercepts all room conversations and passes them

down the phone line even while the phone is hung up. If room audio is heard on the phone

line, the telephone should be checked for the hookswitch bypass attack.

P-04

CARRIER CURRENT/VIDEO CAMERA PROBE

ABOUT THE P-04

Size: 7.3” x 2.25” x 1.3”

Weight: 8 oz.

Power: Supplied byTD-53 and by internal 9 volt battery – replace with alkaline type –

Eveready 522 or equal. Current drain is 9 mA.

Frequency Range: 10 KHz and 50 KHz to 600 KHz in two ranges.

Antenna: Permanently attached Very Low Frequency (VLF). Indicators: Red LED – Lights

only when probe is plugged into TD-53 and Range switch is in the 10-130 position or 50-600

position.

Controls:

Range – 3 position switch – selects either 10-130 KHz, OFF or 50-600 KHz.

Tune – Tunes through both of the above ranges from low to high.

THEORY

Carrier Current Transmitters, marketed as “wireless intercoms” and “wireless room

monitors”, consist of a transmitter and sensitive microphone which intercepts room

conversations and sends them along the power lines to a receiver. Very little signal radiates

away from the power line. That is why a countermeasures sweep should include an

examination of power lines in the target room with a tune-able carrier current detector.

Most carrier current devices fall in the frequency range of 30 KHz to 500 KHz. The popular

wireless intercoms sold in electronics stores are usually set to operate between 150 KHz

and 300 KHz. The P-04 covers a wider frequency range than this to catch devices whose

operating frequency has been modified by the eavesdropper.

The P-04 can also be used to detect video cameras. These cameras have a horizontal

oscillator – most operate at 15.75 KHz- that radiates a signal that can be picked up and

detected by the P-04.

GETTING STARTED

If a battery has not already been installed, go ahead and install one now. Use Eveready

522 (alkaline) or equal. The battery compartment is accessed by using a flat blade

screwdriver and separating the top cover from the bottom cover. Connect the battery to the

battery snap and place in the holder. Reinstall the cover.

The P-04 Range switch should be “OFF”. Plug the P-04 cable into the probe jack on the

top end of the TD-53. If you plan to use the headphones, go ahead and plug them into the

TD-53 headphone jack.

FINDING CARRIER CURRENT DEVICES

Use the following procedures to check for carrier current devices on AC power lines:

1. Turn on a sound source in the target room such as a radio. Next turn on the

TD-53 and set the MODE switch to “verify” and the SENSITIVITY switch to “high”.

2. Ignore any reading on the TD-53 LED meter. Set the P-04 RANGE switch to

“10-130” and the TUNE control to “Min”. The power on LED on the P-04 should be on.

3. Turn on all appliances, lights, etc. that normally operate in the target room.

Position the P-04 antenna next to the line cord for all of the above appliances or lamps.

Remember that you are trying to pick up a low level signal that may be traveling along the

AC power lines. If the signal is there, it will also be present on any line cords that are

plugged in.

4. Slowly tune Range control from “Min” to “Max” and back again while listening

for the sound source.

5. Switch Range switch to “50-600” and repeat step 4.

6. If you hear the sound source through the TD-53 in either of the above steps,

there is a carrier current device operating on the line and you should try to locate it. To do

so, try unplugging appliances and lamps one at a time. If the sound goes away once the

cord is pulled on an item, you have located the transmitter. It could also be concealed

behind a switch plate or wall outlet. If so, you will have to search with the P-04 probe. As

you get closer to the device, the sound will become louder.

7. Carrier current transmitters are associated with power line attacks. You should

be aware, however, that telephone lines and other wire pairs can also be used. To check

these other wire pairs, simply place the P-04 antenna next to the pairs you want to check

and repeat steps 4 and 5 above.

8. For a complete check of the target room, repeat the above steps at several

different locations in the room. This will cover the possibility of two different power line feeds

to the same room.

Este manual sirve para los siguientes modelos

Tabla de contenidos

Manuales populares de Instrumento de medición de otras marcas

Suaoki

Suaoki D40 Manual de usuario

Elster

Elster BK-G1.6 Manual de usuario

Endress+Hauser

Endress+Hauser Deltabar FMD71 Manual

Duratool

Duratool D03128 Manual de usuario

Vega

Vega VEGAPULS 65 Manual de usuario

Tonghui

Tonghui TH2618B Manual de usuario

Tenmars

Tenmars TM-801 Manual de usuario

MSR

MSR 145 Manual de usuario

TPS

TPS WP-82 Manual de usuario

ELMETRON

ELMETRON CP-511 Manual de usuario

PCB Piezotronics

PCB Piezotronics 003C30 Manual de usuario

Tenma

Tenma 72-10465 Manual de usuario

Endress+Hauser

Endress+Hauser Proline Promag 50 Especificaciones técnicas

Siemens

Siemens SITRANS F Coriolis FCT030 Manual de lista de piezas

KLINGER

KLINGER CMF V Series Manual de usuario

EXFO

EXFO FTB-2 Manual de operación y mantenimiento

Keysight

Keysight M8290A Manual de usuario

ADTEK

ADTEK MW-5 Manual de usuario