Layer a timeline below your link chart. Suddenly, you see that every time Person A calls Person B, a cash withdrawal happens 10 minutes later at a specific ATM. Temporal proximity = investigative gold.
The software’s core strength is —where every node (person, place, device, account) connects via links that carry meaning, weight, and temporality. i2 analyst notebook
If you’ve ever tried to untangle a money laundering scheme, map a terrorist network, or visualize a botnet’s command-and-control infrastructure, you’ve almost certainly heard of . Acquired by IBM years ago, this desktop-based investigative tool has been around for decades—yet it remains one of the most powerful, non-negotiable pieces of software in serious analytic shops. Layer a timeline below your link chart
❌ – Don’t spend 45 minutes picking colors. Spend 45 minutes running network metrics. Presentation can come after analysis. The software’s core strength is —where every node
Running a year-long investigation? Duplicate your chart, apply a 6-month filter to the second version, and compare side-by-side. The network shift often reveals when a criminal changed behavior (e.g., after a co-conspirator was arrested).