You are here: Analyst's functions > Intelligence > What you should know about intelligence > What you should know about how the Intelligence system works

What you should know about how intelligence works

Introduction

Intelligence supports the analyst in processing the investigation evidence and data.

Intelligence process
Phase Description
1

The system creates an operation in the Intelligence section when an operation is opened in the Operations section.

2 The system creates a Target entity when a target is created in the Operations section.
3

The system, based on the evidence collected from target devices, creates links with target entities and creates new entities and links.

NOTE: the system processes information from targets in all open operations.

4

The analyst adds entities to represent people, places and web pages deemed of interest for the investigation and adds details.

5 The system continues to update entities and their links based on new evidence and information added by the analyst.
6

The analyst interprets and manages entities and their links to propose solutions for the investigation.

NOTE: the analyst can set an alert rule to be alerted when the system creates an entity or link.See "Alert"

Automatic Know link creation criteria

If the evidence indicates that...

The system creates...

targets John and Paul have identification 003214567 in their address book

  • a Person entity with identification 003214567
  • a directional Know link from John to the Person entity
  • a directional Know link from John to the Person entity

target John has identification 003214567 for Target/Person entity Paul in his address book

a directional Know link from John to Paul

Automatic Peer link creation criteria with Target and Person entities

If the evidence indicates that...

The system creates...

targets John and Paul communicated with identification 003214567

  • a Person entity with identification 003214567
  • a directional Peer link from John to the Person entity
  • a directional Peer link from Paul to the Person entity

target John communicated with Target/Person entity Paul

a directional Peer link from John to Paul

target John often communicates with identification 003214567

  • a Person entity with identification 003214567
  • a directional Peer link from John to the Person entity
Automatic Peer link creation criteria with Position entities

If the evidence indicates that...

The system creates...

targets John and Paul were in Times Square at the same time

  • a Position entity with the geographic coordinates for Times Square
  • a directional Peer link from John to the Position entity
  • a directional Peer link from Paul to the Position entity

target John was in the place associated with John's office Position entity

a direction Peer link from John to John's office entity

target John is often in Times Square

  • a Position entity with the geographic coordinates for Times Square
  • a directional Peer link from John to the Position entity

NOTE: for the system, a target visited a place if they were there for at least 15 minutes. Two targets visited the same place at the same time if they were there at the same time for at least 15 minutes.

Automatic Peer link creation criteria with Virtual entities

If the evidence indicates that...

The system creates...

target John visited URL www.secretplaces.com linked to the Virtual entity Secret places website

a direction Peer link from John to Secret places website

Automatic Identity link creation criteria with Target and Person entities

If the system detects that...

The system creates...

Target/Person entity John has 003214567 in his identification data and Target/Person entity Paul has 003214567 in his identification data

an Identity link between John and Paul

Automatic link creation criteria between Target/Person entities in different operations

If the system detects that...

The system creates...

conditions are met to create a link between the Drug traffic John Target/Person entity and Weapon traffic Paul Target/Person entity

NOTE: link creation criteria between operations are the same as those for a link inside the operation.

in the Drug traffic operation,

  • the Weapons traffic Group entity
  • a link between John and the Weapons traffic Group

in the Weapons traffic operation

  • the Drug traffic Group entity
  • a link between Paul and the Drug traffic Group

NOTE: if the Group entity was created due to a previous relationship, only the link is created.

NOTE: the type and direction of the created link are determined by the same link rules between entities in the same operation.

RCS9.3 | User's and Installation Guide | © COPYRIGHT 2013