The disclosure includes an apparatus comprising a diagnostic unit configured to communicate with a rules engine to determine whether a transmission detected in a vehicle is classified as unauthorized wireless device usage based on characteristics of RF signals received by a Detector Module collocated with the vehicle, geographic location data, and, optionally, additional secondary data, such determination being made by an external Rules Engine that is in communication with the Detector Module. The Rules Engine can provide instructions to and modify various threshold values used for preliminary RF signal analysis by the Detector Module.