A manner of creating an electronic device directory containing the identity of electronic devices that registered in an area associated with a plurality of events, which events are similar in certain respects. The directory is useful, for example, investigating criminal cases. When such an event occurs, an application server is notified and generates one or more device registration capture requests to determine which electronic devices are registered in the area and at approximately the same time at which the event occurs. The device registration capture associated with this event is compared with other device registration captures associated with other, similar events to create the electronic device directory. The electronic device directory entries are preferable filtered to select the devices most likely to be associated with the actual events in question.