Investigation Graph Operations

Overview#

The Investigation Graph Operations module delivers sophisticated network analysis and interactive graph manipulation capabilities that accelerate pattern recognition while revealing hidden entity relationships. Purpose-built for financial crime investigators, fraud analysts, and intelligence teams, the system transforms complex entity networks into intuitive visual representations with powerful manipulation, annotation, and analysis tools.

Key Features#

• Node Merging and Entity Resolution -- Consolidates duplicate or related entities into unified graph nodes with configurable merge strategies, relationship preservation, attribute aggregation, and complete audit trails with rollback capability.
• Node Splitting and Entity Disaggregation -- Separates erroneously combined entities with ML-assisted attribute partitioning and relationship routing, supporting individual-vs-organization splits, multi-person household separation, and business subsidiary disaggregation.
• Interactive Relationship Creation -- Enables investigators to document suspected connections with 47 pre-defined relationship categories, evidence attachment, confidence scoring, temporal modeling, and hypothesis tracking.
• Graph Bookmark Management -- Preserves critical investigation states with complete graph state capture, hierarchical organization, team sharing, and single-click restoration for investigation continuity.
• Advanced Layout Algorithms -- Force-directed, hierarchical, circular, grid, geographic, and temporal layout algorithms automatically position nodes for optimal comprehension across varying network structures.
• Multi-Dimensional Filtering -- Sophisticated filtering across 12 entity attribute dimensions and 8 relationship attribute dimensions with AND/OR/NOT logic, saved filter presets, and real-time graph updates.
• Graph Annotation and Evidence Linking -- Text annotations, visual highlights, evidence document attachments, risk flags, directional arrows, and shape overlays enable comprehensive case documentation directly on the graph.
• Custom Node and Edge Styling -- Attribute-based visual encoding through color, size, shape, and iconography communicates entity risk, relationship strength, and custom classifications with conditional styling rules.
• Graph View Persistence -- Auto-saves custom layouts, node positions, filter configurations, and viewport states with version history, ensuring investigators maintain consistent analytical perspectives.
• Real-Time Collaboration -- Multi-user graph editing with conflict resolution and low-latency synchronization supports concurrent investigation team work.

Use Cases#

• Shell Company Network Mapping -- Node merging consolidates duplicate entities, relationship creation documents beneficial ownership connections, and hierarchical layouts reveal corporate control structures across multiple jurisdictions.
• Cryptocurrency Flow Analysis -- Force-directed layouts reveal hub-and-spoke mixing patterns, node filtering isolates high-value flows, and edge styling highlights temporal transaction sequences for tracing illicit fund movements.
• Trade-Based Money Laundering Investigation -- Hierarchical layouts organize corporate structures, node splitting separates erroneously aggregated entities, and geographic layouts reveal jurisdiction shopping patterns in import/export networks.
• Investigation Milestone Preservation -- Graph bookmarks capture key investigation states for team review, management reporting, and audit trail documentation throughout multi-week case progression.
• Peer Review and Training -- Saved graph views with annotations serve as collaboration checkpoints for peer review sessions and training examples for new analysts.

Integration#

The Graph Operations module integrates with the investigation platform's entity resolution, case management, and evidence management systems. Graph manipulations update underlying entity records, relationship databases, and investigation timelines. The module supports export in GraphML, GEXF, JSON, CSV, and high-resolution image formats (PNG, SVG, PDF) for reporting and external analysis tools.

Last Reviewed: 2026-02-05