Cogility Intel Framework

Cogility Intel Framework Overview

The Intel Framework provides integration with the Cogility Template Event Processing Language to perform pattern-based searches of collected information, collection guidance, and differentiation of suspect activity patterns. The Intel Framework is built on top of Cogility Studio and relies on that product for integration with existing and legacy systems and information sources, and for workflow features

Cogility Tools

Cogility Intel Framework Solution

The Cogility Intel framework provides a pre-built set of tools for jump-starting intelligence or investigative projects. The framework provides the following key components:

  • Case File Management
  • Web UI
  • Evidence Accrual
  • Geospatial-Temporal Mapping
  • Link Discovery, Mapping, and Evaluation
  • Human-in-the-loop Tasking and Collaboration

The Intel Framework provides integration with the Cogility Template Event Processing Language to perform pattern-based searches of collected information, collection guidance, and differentiation of suspect activity patterns. The Intel Framework is built on top of Cogility Studio and relies on that product for integration with existing and legacy systems and information sources, and for workflow features (covered in separate white papers).

Case File Management

The central component of the Cogility Intel Framework is case file management. Case files can be created and formed manually by analysts to track information and evidence related to an incident, a suspect, or a combination of events and targets. Case files can also be created automatically with the use of the Cogility Template Event Processing Language component.

Web UI

The Intel Framework is server based and includes a web UI for accessing and directing component activity. The Web UI is analyst centric focusing on the workflow, tasks, and activities analysts engage in during investigations.

Evidence Accrual

There is a large difference between information and evidence, limits on what collection methods can be used, and evidence can come in physical form needing identification and tracking. The Intel Framework provides tracking, identification, and support for processes related to Evidence Accrual.

Geospatial-Temporal Mapping

Information within the Intel Framework is tracked in Geospatial and Temporal dimensions. The information and the connections between it can be displayed geospatial on a map, temporally on a time line, and in several forms to highlight linkages and clustering.

Link Discovery, Mapping, and Evaluation

A central part of tracking an investigation is working with links between people, suspects, witnesses, and victims. The Intel Framework tracks linkages, types of links, information substantiating links, and supports entity extraction (using an external tool).

Human-in-the-loop Tasking and Collaboration

The Intel Framework includes a component for human in the loop tasking and collaboration. This component allows workflow within the organization to be automated and support the investigation process. The collaboration can reach outside the organization to experts and other supporting organizations that are routinely involved in support activities (through the web UI, email, SMS, and other methods), or to those occasionally involved (through email and similar contact methods).