We investigate a few cases of customers outside LEO, public cases. A Swiss MNO charges customers which had flight mode activated but got charged with data consumption. Its obvious that the MNO has a problem in its own OSS.
As this is not a case of law enforcement the MNO does not open its own logs and data.
How can - must be possible for ordinary customers, not LEOs - be checked if data came over MNO or WiFi? Checked I mean logged and court bullet-proofed. A data consumption app is too weak as a free or paid App does not stand in front of court.
A new phenomena of a cry for forensics but nobody willing/able to pay and we as LEO are bound to not go to work.
But its kind of mission impossible for ordinary customers to fight against a Fortune 500 company.
Your recommendation for these users?