Intelligence supports the analyst in processing the investigation evidence and data.
Phase | Description |
---|---|
1 |
The system creates an operation in the Intelligence section when an operation is opened in the Operations section. |
2 | The system creates a Target entity when a target is created in the Operations section. |
3 |
The system, based on the evidence collected from target devices, creates links with target entities and creates new entities and links. NOTE: the system processes information from targets in all open operations. |
4 |
The analyst adds entities to represent people, places and web pages deemed of interest for the investigation and adds details. |
5 | The system continues to update entities and their links based on new evidence and information added by the analyst. |
6 |
The analyst interprets and manages entities and their links to propose solutions for the investigation. NOTE: the analyst can set an alert rule to be alerted when the system creates an entity or link. See "Alert". |
If the evidence indicates that... |
The system creates... |
---|---|
targets John and Paul have identification 003214567 in their address book |
|
target John has identification 003214567 for Target/Person entity Paul in his address book |
a directional Know link from John to Paul |
If the evidence indicates that... |
The system creates... |
---|---|
targets John and Paul communicated with identification 003214567 |
|
target John communicated with Target/Person entity Paul |
a directional Peer link from John to Paul |
target John often communicates with identification 003214567 |
|
If the evidence indicates that... |
The system creates... |
---|---|
targets John and Paul were in Times Square at the same time |
|
target John was in the place associated with John's office Position entity |
a direction Peer link from John to John's office entity |
target John is often in Times Square |
|
NOTE: for the system, a target visited a place if they were there for at least 15 minutes. Two targets visited the same place at the same time if they were there at the same time for at least 15 minutes.
If the evidence indicates that... |
The system creates... |
---|---|
target John visited URL www.secretplaces.com linked to the Virtual entity Secret places website |
a direction Peer link from John to Secret places website |
If the system detects that... |
The system creates... |
---|---|
Target/Person entity John has 003214567 in his identification data and Target/Person entity Paul has 003214567 in his identification data |
an Identity link between John and Paul |
If the system detects that... |
The system creates... |
---|---|
conditions are met to create a link between the Drug traffic John Target/Person entity and Weapon traffic Paul Target/Person entity NOTE: link creation criteria between operations are the same as those for a link inside the operation. |
in the Drug traffic operation,
in the Weapons traffic operation
NOTE: if the Group entity was created due to a previous relationship, only the link is created. NOTE: the type and direction of the created link are determined by the same link rules between entities in the same operation. |
RCS9.5 | User manual | © COPYRIGHT 2014