#647 Identity Request heuristic (IMSI/IMEI): LTE-only or also GSM/UMTS? (TP-Link M7310, v0.7.0

Respilot2025-10-13, edited 2025-10-16OpenQ&A

Does Rayhunter’s Identity Request heuristic (IMSI/IMEI) trigger only for LTE NAS Identity Request events, or can it also detect identity requests on 2G (GSM) / 3G (UMTS)?

My setup

Rayhunter: v0.7.0
Device: TP-Link M7310 (EU v2.0)
Hotspot network prefs: 3G/4G/5G (no 2G option)
Heuristics enabled: Identity Request, 2G Redirect, LTE SIB6/7 Downgrade, Null Cipher, NAS Null Cipher, Incomplete SIB (plus Test Heuristic briefly)

Comments (1)

cooperq2025-10-16, edited 2025-10-16

It is only for identity requests in 4g and not 3g/2g since we don’t have parsers for those protocols. but we do have a separate heursitic that will alert about a downgrade to 3g/2g.