Have you looked at the victims CDR's? I would focus my attention on the data traffic from their device? You may see that the device is transferring a large amount of data during early morning hours? If so where is it going? If you decide to ask tell them you would like an hourly breakdown if possible.
Where is your suspect? If he is here in the U.S. you can obtain a decent amount of material with "specific and articulable facts", but that will depend on your jurisdiction.
↧