Forensic Analysis
With Forensic Analysis, offers you a tool to provide a graphical visualization of the context associated with any selected event. This allows you to filter the data sorted by one criterion, the pivot factor, and display it in a graphical representation.
Forensic Analysis enables you for instance to view the links between the devices a customer used for a particular event and the locations and IP addresses from which this customer used the devices.
Accessing the Forensic Analysis page in SUPERVISE & INVESTIGATE
You access the Forensic Analysis page via the Events grid or from the Score Analysis page by clicking Go to Forensic Analysis in the grid; this button is located in the graph display column in the row of the corresponding event. In the default layout of the Score Analysis dashboard, this is the right-most column of the grid. After clicking the button, the Forensic Analysis page opens in a new browser window.
You have access to the Forensic Analysis page if you are assigned the corresponding for your user permissions to access the Events grid and/or the Score Analysis page . If you require more options, contact the Risk Analytics administrator for your company.
Filters for Forensic Analysis
For the visualization, three sets of filter attributes are available to obtain the event’s relationships during a given period in the graphical representation: pivot factors, dimensions, and the time line. Visualization filter attributes provides a description of each filter attribute.
Visualization filter attributes
| Filter attribute |
Description |
| Pivot Factors |
The pivot factors serve to establish the link between the event and its context.
If, for example, the customer linked to a particular event is used as the pivot factor, this customer is identified by their relationship reference. Forensic Analysis uses the data to offer a graphical representation of the locations, devices, IP addresses, and beneficiaries linked to this customer.
In the graph, the pivot factor is represented by the center circle. The default pivot factor used for constructing the graph is Customer.
|
| Dimensions |
The dimensions are attributes derived from the relationship references in Risk Analytics. Determine which dimensions to use in the graph by selecting the relevant check boxes in the Forensic Analysis page.
Depending on the selected pivot factor, the dimensions that can be selected change dynamically: if Customer is chosen as pivot factor, Customers cannot be selected as dimension to analyze this event. If another pivot factor is selected, for instance Device, Customers is again available for selection as dimension for the graph, but Devices is no longer offered as an option.
In the graph, the dimensions are represented by quadrants.
|
| Timeline |
With the time line you can choose different periods of time as focus of the analysis.
The selected periods are represented in the graph as concentric circles, with the circle of the shortest period closest to the center. By default, the time line covers four periods:
- 1w. First time step. Covers a period of one week.
- 2w. Second time step. Covers a period of two weeks.
- 3w. Third time step. Covers a period of three weeks.
- 1m. Fourth time step. Covers a period of one month.
The space between two circles indicates the period between the two corresponding time steps.
|
A highly dynamic web interface that provides webpages for the user to intuitively interact with Risk Analytics. It is a Microsoft .NET 4.7.2 ASP.NET application hosted inside Microsoft Internet Information Services (IIS). offers you a tool to provide a graphical visualization of the context associated with any selected event. This allows you to filter the data sorted by one criterion, the pivot factor, and display it in a graphical representation.