As society becomes more digital, lawful intelligence data universes have become larger and more complex, drawing on interception, location intelligence, public and commercial datasets, the dark web, and much more. While expanded datasets hold the potential for greater investigative reach, insights are hidden in the bulk of noise. Analysts become overwhelmed by bloated data and workflows, succumbing to data fatigue that compromises their effectiveness and efficiency.
In addition to highly defined workflows, AI and machine learning show promise at utilizing data beyond human scale, augmenting workflows and usage models in ways unseen prior however, for the foreseeable future, they will remain adjuncts to human expertise, rather than replacements. Human-centric data tools including powerful, flexible querying are foundational to end-to-end intelligence, surfacing insights when and where they are needed. Still, many lawful intelligence tools rely exclusively on static, pre-built queries. SS8 innovations around intelligent query syntax extends an analysts’ ability to explore and traverse data, so they can effectively see beyond the noise to advance cases.
Flexible Syntax and Logic Make Queries More Capable
Intelligent query syntax builds beyond the capabilities of simple queries with configurable parameters and algebraic operators such as Boolean logic (e.g., AND, OR, NOT). For example, rather than searching through communications for the phrase “wire transfer,” it is possible to run a query for “wire transfer” OR “shell company.” Using such operators in series gives analysts greater control over and insights from the data than with static, pre-built queries. In the following example, each item in orange is a parameter defined by the analyst at query time:
(“Tor browser” OR “onion site”) AND (“crypto wallet” OR “drop location”) NOT “research”
Multi-queries run multiple queries in succession, as a single operation. That is, rather than just specifying data that meets multiple criteria, multi-queries can fetch a body of data, then run successive queries on progressively more specific subsets of that of data. Like the individual parameters, the queries themselves act as modular components that can be added, removed, or rearranged as needed:
Query 1:
(“Tor browser” OR “onion site”) AND (“crypto wallet” OR “drop location”) NOT “research”
Query 2:
(“darknet market” OR “subject profile”) AND (“escrow” OR “delivery instructions”) NOT (“test” OR “demo”)
The multi-query logic addresses complex questions and surfaces patterns in data by running multiple, distinct lines of inquiry—each with its own modular logic, scope, and filters—within a unified analytical context. Live correlation of results within the multi-query could flag a crypto wallet in Query 1 that is associated with the subject profile in Query 2, for example, without the need for analysts to stitch together those findings manually. The individual queries can also be readily swapped out or rearranged as needed.
Multi-query capability is common within the industry, and this concatenated logic emulates human thought better than stacks of isolated inquiries. At the same time, many lawful intelligence platforms limit the utility of the multi-query approach by providing only static, pre-built individual queries. The SS8 platform empowers analysts with full control over query parameters in a multi-query context, for unmatched efficiency and control over their data, across parameter types including location, temporal limitations, device types, language, and much more.
Unified Workflows Based on Intelligent Multi-Queries
Sophisticated law-enforcement analysts know their data and investigations better than anyone else. SS8 multi-queries, based on parameterized variables, bring the power of that expertise to the fore, rather than imposing the limitations of pre-fixed, rigid query strings. The SS8 platform provides a powerful indexing database that indexes almost every parameter of investigative data ingested into the system. This factor lets analysts create queries using that full range of variables, such as an IMSI or IMEI, keyword, car make and model, or time and place.
Analysts steer their workflows based on real-world data and their individual investigative styles, overcoming the imprecision and inefficiency of synthetic, pre-formed queries as well as protecting data integrity and confidentiality. The platform itself optimizes query handling to ensure computing efficiency, so overly broad queries cannot monopolize shared resources, for example.
The sophisticated user interface arranges query results in a columnar format similar to a spreadsheet, with intuitive features such as sorting, filtering, and grouping that enhance usability and drill down efficiently to rapidly find the needles in a given haystack. Rich visualizations such as heat maps and link charting between subjects of interest compound these abilities, rapidly surfacing insights and providing a presentation layer for evidence.
The SS8 platform integrates extensive controls to protect both raw data and query results with measures such as full encryption at rest and in transit, MD5 hashing to ensure data integrity, and role-based access and auditability using industry-standard authentication and authorization. It gives investigators the digital reach, visibility, and insight to leverage their expertise to the fullest, manifesting the SS8 commitment to maximize human talent with the tools and techniques they need to protect society.
About Dr. Keith Bhatia
About Syed Hussain
Syed Hussain has spent more than 20 years working in the telecommunication and cyber security industry in Engineering and Product Management leadership roles. He brings significant technical expertise to his role as VP of Product Management for SS8’s Lawful Intelligence products, covering Service Providers and Law Enforcement market domains. He has led architecture and design of 4G and 5G Lawful Interception solutions in Cloud and non-cloud environments. Syed represents SS8 in both ETSI and 3GPP standards bodies and at technology summits and holds a BS in Computer Science and Engineering. You can learn more about Syed on his LinkedIn profile here.
About SS8 Networks
As a leader in Lawful and Location Intelligence, SS8 is committed to making societies safer. Our mission is to extract, analyze, and visualize critical intelligence, providing real-time insights that help save lives. With 25 years of expertise, SS8 is a trusted partner of the world’s largest government agencies and communication providers, consistently remaining at the forefront of innovation.
Discovery is the latest solution from SS8. Provided as a subscription, it is an investigative force multiplier for local and state police to fuse, filter, and analyze massive volumes of investigative data – in real time.
Intellego® XT monitoring and data analytics portfolio is optimized for Law Enforcement Agencies to capture, analyze, and visualize complex data sets for real-time investigative intelligence.
LocationWise delivers the highest audited network location accuracy worldwide, providing active and passive location intelligence for emergency services, law enforcement, and mobile network operators.
Xcipio® mediation platform meets the demands of lawful intercept in any network type and provides the ability to transcode (convert) between lawful intercept handover versions and standard families.
To learn more, contact us at [email protected].
