You are here: RCS Console for the Analyst > What you should know about intelligence > What you should know about how the Intelligence system works

What you should know about how intelligence works

Introduction

Intelligence supports the analyst in processing the investigation evidence and data.

Intelligence process
Phase Description
1

The system creates an operation in the Intelligence section when an operation is opened in the Operations section.

2 The system creates a Target entity when a target is created in the Operations section.
3

The system, based on the evidence collected from target devices, creates links with target entities and creates new entities and links.

NOTE: the system processes information from targets in all open operations.

4

The analyst adds entities to represent people, places and web pages deemed of interest for the investigation and adds details.

5 The system continues to update entities and their links based on new evidence and information added by the analyst.
6

The analyst interprets and manages entities and their links to propose solutions for the investigation.

NOTE: the analyst can set an alert rule to be alerted when the system creates an entity or link. See "Alert".

Automatic Know link creation criteria

If the evidence indicates that...

The system creates...

targets John and Paul have identification 003214567 in their address book
  • a Person entity with identification 003214567
  • a directional Know link from John to the Person entity
  • a directional Know link from John to the Person entity
target John has identification 003214567 for Target/Person entity Paul in his address book a directional Know link from John to Paul
Automatic Peer link creation criteria

If the evidence indicates that...

The system creates...

targets John and Paul communicated with identification 003214567
  • a Person entity with identification 003214567
  • a directional Peer link from John to the Person entity
  • a directional Peer link from Paul to the Person entity
target John communicated with Target/Person entity Paul a directional Peer link from John to Paul
target John often communicates with identification 003214567
  • a Person entity with identification 003214567
  • a directional Peer link from John to the Person entity
Automatic Position link creation criteria

If the evidence indicates that...

The system creates...

targets John and Paul were in Times Square at the same time
  • a Position entity with the geographic coordinates for Times Square
  • a directional Position link from John to the Position entity
  • a directional Position link from Paul to the Position entity
target John was in the place associated with John's office Position entity a direction Position link from John to John's office entity
target John is often in Times Square
  • a Position entity with the geographic coordinates for Times Square
  • a directional Position link from John to the Position entity
a photo of target John published on Facebook was taken in Times Square
  • a Position entity with the geographic coordinates for Times Square
  • a directional Position link from John to the Position entity

NOTE: if a person is tagged in the photo, the system automatically creates a Person entity for that person and a Position link between that Person entity and the Position entity.

NOTE: for the system, a target visited a place if they were there for at least 15 minutes. Two targets visited the same place at the same time if they were there at the same time for at least 15 minutes.

Automatic Virtual link creation criteria

If the evidence indicates that...

The system creates...

target John visited URL www.secretplaces.com linked to the Virtual entity Secret places website a directional Virtual link from John to Secret places website
Automatic Identity link creation criteria with Target and Person entities

If the system detects that...

The system creates...

Target/Person entity John has 003214567 in his identification data and Target/Person entity Paul has 003214567 in his identification data an Identity link between John and Paul
Automatic link creation criteria between Target/Person entities in different operations

If the system detects that...

The system creates...

there are conditions for creating a link between the Drug Traffic operation John Target/Person entity and the Weapons Traffic operation Paul Target/Person

NOTE: the link creation criteria between operations are the same as those for a link within the operation.

in the Drug Traffic operation,
  • the Weapons Traffic Group entity
  • a link between John and the Weapons Traffic Group in the
Weapons Traffic operation,
  • the Drug Traffic group entity
  • a link between Paul and the Drug Traffic Group

NOTE: if the Group entity had already been created by a previous relation, only the link is created.

NOTE: the type and direction of the created link are determined by the same link rules between entities in the same operation.

RCS9.6 | User manual | © COPYRIGHT 2015