SYSTEM AND METHOD FOR SHARING INVESTIGATION RESULTS

摘要

A computer-based investigative analysis system is disclosed in which a user can share results of an investigation with other users in a way that allows the sharing user to visualize how the results will be shared before they are shared. The results are shared in the form of a visual graph having nodes, edges, and other presentation elements. The nodes represent data objects that are the subject of the investigation and the edges represent connections between the data objects. The graph is shared in the form of an automatically generated redacted graph omitting nodes, edges, and presentation elements for which the other users do not have permission to view. Before sharing the graph, the sharing user is presented with a visualization of the automatically generated redacted graph providing the user an opportunity to confirm that sharing the redacted graph will not constitute an unauthorized information leakage.

主权项

1. A computer-implemented method, comprising:
selecting a subset of data objects from a base copy for use with a first investigation; creating a first instance of graph state information based on the subset of data objects included in the base copy and including a graph having nodes representing the subset of data objects and edges representing relationships between the subset of data objects; causing, based on the first instance of graph state information, a visualization of the first instance of graph state information in association with the first investigation; receiving first input to modify information associated with at least one data object of the subset of data objects to create a second instance of graph state information based on the first instance of graph state information; receiving information that identifies a set of targets that are allowed to access the second instance of graph state information to assist in the first investigation; before allowing the set of targets to access the second instance of graph state information, causing a visualization of the second instance of graph state information; receiving an acceptance of the second instance of graph state information, and in response, publishing the second instance of graph state information to a graph repository and then allowing the set of targets access to the published second instance of graph state information.