Entity management: link view

To manage
entities subject to intelligence:
  • Intelligence section, double-click an operation, click Link map
Purpose

This function lets you:

NOTE: this function requires a user license. Without a license, the default operation entity view is the icon view, see "Entity management: icon and table views".

NOTE: the function is only enabled if the user has Entity management authorization.

What the function looks like

This is what the page looks like:

Area Description
1

RCS menu.

2

Scroll bar

3

Window toolbar. Descriptions are provided below:

Icon Function
Creates a new entity

Editing an entity

Deletes an entity

Exports entity data in .html format

Merges two entities

Open the target page associated with the entity See "Target page".

Open evidence that contributed in generating that link. Link type filters were set in the graph. The displayed evidence will be filtered accordingly (i.e.: whatsapp and facebook only). See "Evidence analysis (Evidence)"

: creates a link

: edits a link

: deletes a link

: applies a level of relevance to a link

: creates a Group entity

: deletes a Group entity

: expand all Groups

:shrink all Groups

Exports the entity graph in .graphml format.

4

View and search box buttons:

Object Description

Search box. Enter part of the name or description to display a list of entities that contain the entered letters.

Displays the entities in a table. See "Entity management: icon and table views"

Displays entities as icons See "Entity management: icon and table views"

Displays Target and Position entities and their links on a map. See "Entity management: Position view"
Displays entities and their links in a graph.
5

Filter area

6

Entity graph and links based on set filters

NOTE: the Know, Identity and manually created links are always displayed regardless of the selected period.

NOTE: the entity with the most links is placed at the center of the graph.

7

Selected entity data.

8 Command that dynamically displays the quantity, direction and frequency of evidence that define the links between the entities displayed in the graph based on the set filters.
9

RCS status bar.

 

To learn more

For interface element descriptions see "Shared interface elements and actions".

To learn more about intelligence see "What you should know about intelligence"see "What you should know about entities"

Viewing entity details

To view entity details:

Step Action
1

Double-click an entity: the detail page opens.

  • "Target entity details" .
  • "Person entity details" .
  • "Position entity details" .
  • "Virtual entity details" .
Merging two entities in one

To merge two entities in one:

Step Action
1

Select the two entities holding down the Ctrl key on the keyboard.

NOTE: only a Target entity can be merged with a Person entity or two Person entities.

2

Click Merge

Result: an entity with the name and description of the first entity is displayed in the graph with the details on both.

NOTE: if a Target entity is merged with a Person entity, the Target entity remains with the Person entity details.

Creating a link between two entities

To create a link between two entities:

Step Action
1

Select the two entities holding down the Ctrl key on the keyboard.

2 Click Links, Add
3

Select the direction, type and level of relevance of the link and click Save.

Result: the link is displayed in the graph

Creating a Group

To create a Group:

Step Action
1

Select the entities to be grouped holding down the Ctrl key on the keyboard.

2

Click Groups, Group.

Result: the Group is displayed in the graph.

Dynamically displaying evidence on links between entities

To dynamically display evidence on links between entities:

Step Action
1

Make sure the entities displayed on the graph and the selected time period are those required.

Use the filters to set preferences.

2

Click Play to display.

Result: red balls slide along links to represent collected evidence.

NOTE: the direction in which the ball slides indicates the direction of the evidence (i.e.: the red ball slides from the John entity to the Paul entity if John sent an email to Paul).

NOTE: the number of balls indicates the quantity of evidence: one ball indicates that at least 10 pieces of evidence were collected, two balls between 10 and 50 pieces, three balls if more than 50 pieces of evidence were collected.

NOTE: if the link was created on that day, it is displayed on the map on that day.

3

Click Stop to stop the display.