" type="image/svg+xml">
Case Study Mobile Device Forensics · Criminal Defense

0.2 Milliseconds: How a Call Record Defeated a Contempt Charge

A restraining-order violation hinged on a single phone call. The carrier said the call happened. We extracted the device-level record and proved the call lasted two-tenths of a millisecond — physically impossible for a human-initiated conversation. The DA conceded. The charges were dropped.

Jurisdiction
Oregon — Circuit Court
Matter Type
Criminal Contempt / Family Law
Outcome
Charges dismissed
0.2 ms
Actual Call Duration
5,000×
Shorter Than 1 Second
1
Forensic Image
Dismissed
Criminal Contempt Charge
The Situation 01

A Phone Call That Never Happened

During contentious divorce proceedings in Oregon, a no-contact restraining order was in place. The client’s carrier call detail records (CDRs) showed a call placed to the protected party’s number. The district attorney filed criminal contempt of court charges — a conviction that would have meant potential jail time and severely compromised the client’s position in custody proceedings.

The client told defense counsel the call was an accidental pocket dial — the phone was in a bag and the screen was pressed inadvertently. But “it was an accident” is not a legal defense without evidence. The carrier’s records showed the call happened. Intent was the only question, and the burden was on the defense to demonstrate it.

Defense counsel retained Cascadia AI Forensics to examine the mobile device and determine whether the forensic evidence supported or refuted the client’s account of an accidental dial.

Case Snapshot
Underlying matter: Contested divorce, custody dispute
Criminal charge: Contempt of court (restraining order violation)
Evidence at issue: A single outgoing phone call
Stakes: Jail time, custody impact, permanent record
The Challenge
Carrier records confirmed a call was placed — the fact of the call was undisputed Carrier CDRs lack sub-second precision — duration was rounded to “0 seconds” The client’s claim of an accidental dial required affirmative technical proof Criminal contempt requires willful intent — the distinction between deliberate and accidental was the entire case
Our Approach 02

Forensic Extraction & Call Record Analysis

01

Forensic Acquisition

Created a bit-for-bit forensic image of the client’s mobile device using write-blocking methodology. The original device was never modified — all analysis was performed against a verified copy, preserving the chain of custody for courtroom admissibility.

02

Call Log Database Extraction

Extracted the device’s native call history database from the forensic image. Mobile operating systems store call records with far greater precision than carrier CDRs — including sub-second duration fields that carriers typically discard or round.

03

Duration Analysis

The device-level call record for the disputed call showed a duration of 0.2 milliseconds. That is two-tenths of one-thousandth of a second — faster than a human blink (300–400 ms), faster than a single heartbeat (800 ms), and orders of magnitude shorter than even the fastest deliberate dial-and-hang-up action.

04

Expert Declaration

Prepared a forensic examination report and expert declaration explaining the technical significance of the 0.2 ms duration: the call was initiated and terminated by the device before a voice channel could be established — consistent with incidental screen contact or proximity-sensor triggering, not a deliberate action.

The Evidence 03

Carrier Records vs. Device-Level Forensics

Carrier CDRs reported the call as “0 seconds” — ambiguous enough for the prosecution to argue a brief intentional contact. The device’s own call database told a different story entirely.

CALL DURATION COMPARISON (LOG SCALE) 0.2 ms Disputed Call (Device Record) POCKET DIAL 300 ms Average human eye blink 1,500× longer than the disputed call 800 ms One resting heartbeat 4,000× longer ~2,000 ms Fastest deliberate dial & hang-up 10,000× longer Bar widths are proportional on a logarithmic scale. Actual linear ratio is far more extreme. Device Blink Heartbeat Intentional
Disputed call (device record)
Human physiological baselines
Minimum deliberate action
ILLUSTRATIVE ONLY — ANONYMIZED CASE DATA. Durations are representative of the forensic findings; specific device model and database field names have been redacted.
Key Findings 04

What the Device Told Us

0.2 ms Call Duration

The device’s call log recorded a duration of 0.2 milliseconds — below the threshold for a voice channel to be established, let alone for any human speech or deliberate action to occur.

Device Data > Carrier Data

The carrier CDR rounded the call to “0 seconds” — ambiguous. The device-level database retained sub-millisecond precision that the carrier records discarded, providing the specificity needed to resolve the question of intent.

No Voice Channel Established

At 0.2 ms, the call was initiated and terminated by the device before a cellular voice channel could complete its setup handshake. No audio was transmitted. No conversation could have occurred.

Consistent with Incidental Contact

The duration profile is consistent with an accidental screen touch or proximity-sensor activation — the device registered a dial attempt and immediately cancelled it. This is a well-documented behavior in mobile forensics literature.

Forensic Integrity Preserved

Every step was performed against a write-blocked forensic image with documented chain of custody. The analysis was fully reproducible and admissible under Oregon’s evidentiary standards.

DA Conceded

Presented with the forensic evidence, the district attorney conceded the call was accidental. The criminal contempt charge was dismissed, and the restraining order was subsequently lifted.

Deliverables 05

What Defense Counsel Received

A complete forensic package that answered the single question at the heart of the case — and made the answer self-evident to a non-technical audience.

✓Forensic examination report documenting the acquisition, extraction, and analysis methodology
✓Expert declaration on the significance of sub-millisecond call duration
✓Chain of custody documentation for the forensic image
✓Demonstrative exhibits comparing call durations in layperson-accessible visual format
✓Verified forensic image with hash verification documentation
✓Expert availability for deposition and trial testimony (not required — DA conceded pretrial)

“Without the device forensics, we had a call record and a client saying it was an accident. With the forensics, we had a number the DA couldn’t argue with. Two-tenths of a millisecond. The case was over before we got to the courtroom.”

— Defense Attorney, Oregon Circuit Court
Ready to Begin

Facing a case where the device holds the answer?

Mobile forensics can surface evidence that carrier records and witness testimony cannot. Initial consultations are confidential and assess whether your matter is a good fit for forensic analysis.

Book a Consultation