10:00am Emma selects a case Emma focuses on her top open case: a new radical cell in a tough neighborhood. The initial lead came from an informant, regarding three teenagers behaving suspiciously, showing signs of radicalization and discussing options to buy weapons. Initial information includes the first name of one, the family name of another, and the car they were driving. Emma needs to gather information and analyze it, find connections, locations and patterns, identify gaps and send investigative questions to her colleagues to fill in missing details. Emma starts creating a 360° view of the cell, striving to learn about the person behind the name, his plans and most importantly what, if any, is the threat. Emma begins with the most promising lead - the suspect for whom she has the most information. After finding the first suspect, Emma analyzes his connections to locate the other two suspects. Connections can be gained from different sources, such as attendees of the same class/school. Once she has a persons short list, Emma works to verify that they are indeed her suspects. ~9:00am Emma arrives at the office, reviews the morning brief, and sets priorities Emma begins with a morning brief, reading new information and receiving updates from her colleagues. Emma notes these items and prioritizes her tasks for the day. Like many other all-source analysts, Emma is responsible for multiple concurrent cases. Today she has 30 cases on her desk. She debates whether to work on an open ongoing case to or search for leads about new evolving activities. NETWORK INTELLIGENCE UPDATE: The assumed whereabouts of their priority target could be incorrect based on contradictions in their data. WEB INTELLIGENCE UPDATE: A monitored suspect has gone silent over the weekend. The criminal group leader may be aware of the investigation. HUMAN INTELLIGENCE UPDATE: Informants report increased tension levels amongst radicals, which could lead to approaching activities. ? ? ? ?