Identity Request heuristic (IMSI/IMEI): LTE-only or also GSM/UMTS? (TP-Link M7310, v0.7.0

[Respilot]

Does Rayhunter’s Identity Request heuristic (IMSI/IMEI) trigger only for LTE NAS Identity Request events, or can it also detect identity requests on 2G (GSM) / 3G (UMTS)?

My setup

• Rayhunter: v0.7.0
• Device: TP-Link M7310 (EU v2.0)
• Hotspot network prefs: 3G/4G/5G (no 2G option)
• Heuristics enabled: Identity Request, 2G Redirect, LTE SIB6/7 Downgrade, Null Cipher, NAS Null Cipher, Incomplete SIB (plus Test Heuristic briefly)

[cooperq]

It is only for identity requests in 4g and not 3g/2g since we don't have parsers for those protocols. but we do have a separate heursitic that will alert about a downgrade to 3g/2g.