VisuaLinks® Product Summary
Finished Intelligence (Proactive Analysis) Example
The following example was derived from a review of the Suspicious Activity Reports - Money Services Businesses (SAR-MSBs) database dealing with all addresses located in the 90210 ZIP code.
The SAR-MSB database contains over 80 addresses in the 90210 ZIP code - made popular by the TV series with the same name. A partial sample of the result set from the database is shown below. As can be seen, the city values are not consistently Beverly Hills - because there are abbreviations, including B H and L A, and there are even values for Harbor City and South Gate. The ZIP_SUSP_LAT and ZIP_SUSP_LONG were calculated using a Disambiguator® ZIP code conversion function.
Displaying all of the results graphically presents each of the unique addresses, as shown in the next diagram. In these examples the specific values (e.g., street names/numbers) are hidden from view.
At this point the data is "walked" one level to show additional connections. In the SAR-MSB model, ADDRESSes are directly connected to SUBJECTs, as illustrated by the large circle to the right of the ADDRESSes in the example below. Newly displayed data is always ordered according to the number of connections. This shows that there is a SUBJECT, near the 11:30 position, that has multiple connections (shown with additional spacing before/after the object).
Clearly, this indicates we have a potential target entity to pursue. What is difficult to see in the above diagram is whether or not any of the ADDRESSes are connected to multiple SUBJECTs. By initiating a redraw of all the data in the display, the following diagram emerges, which quickly reveals that there are instances of multiple connections between SUBJECTs and ADDRESSes.
The next-to-last network is of most interest because it contains a SUBJECT with connections to 5 ADDRESSes within the 90210 ZIP code. Immediately, we know that there will also be a minimum of at least 5 SAR-MSBs because a SUBJECT can only list one ADDRESS per SAR-MSB. Looking closely at the ADDRESSes shows that they represent the same location - with slight variations in the street name, abbreviations, and numbers which are hidden from the label in this example. These 5 ADDRESSes can be merged together into a single object to help clean up the data representation.
Other important visual clues to notice in this diagram include the link thickness. The thick blue link between the SUBJECT and the ID NUMBER indicates that all 5 of the SAR-MSB transactions supported this connection (i.e., the driver's license was presented as the identification in each of the transactions). The thick brown line from the SUBJECT to the PHONE shows consistency for listing a particular work number in the transactions.
Finally, the SSNEIN (Social Security Number / Employer Identification Number) with the red "X" exposes the improper use of a SSNEIN referenced in a DEATH-MASTER file (a database of over 90 million records of deceased people). Interestingly, the thicker line to this particular SSNEIN shows repeated use of the same number, which represents intentional use of this number, as opposed to a typo or transposition error. The second SSNEIN is off by one digit from the other SSNEIN.
At this point, we have a "well-qualified target" to pursue under a full and formal investigation. Since there is a lot of repetitive information in the display, it can be reorganized and presented in a much more refined format. As shown below, we have merged together all of the SAR-MSB objects into a single entity with a label showing the total amount and the date range of the transactions. Additionally, we performed an HTTP Search (Google) to generate the embedded map, created a legend, and added additional text annotations to clarify the content. The final result is shown below as a well-presented diagram with full back-up and documentation.
|
- VisuaLinks Summary - 18 page Full Doc/Printable PDF