11:00am Meeting colleagues Emma meets with her colleagues from sister domains to collaborate on the case: assess the target’s current behavior, identify possible threats and consult on how to find new leads. Each analyst adds his unique domain perspective, each complementing the others. The team’s suspicion that the target is involved in radical activity is growing. They need to understand his intentions. This requires further information that will allow Emma to continue her research later on. After obtaining a warrant, we now understand the whereabouts of the criminal. He has been discussing his plans, but the NETWORK INTELLIGENCE analyst thinks he is hiding something. The WEB INTELLIGENCE analyst notes that recently the target became more active on secured social networks, is neglecting his activity on Twitter and has started liking pages associated with radicals. The HUMAN INTELLIGENCE operator adds information he’s received from his informants, that the target recently lost his job. A Web Intelligence alert points to a suspicious profile looking for explosive tutorials on the Dark Web. The profile is linked to a group of 4 other people, including a known radical. Emma’s purpose: to understand the targets’ intentions and plans and to find their geo locations. She briefs her colleagues, starts searching for leads and clues in the system’s combined sources and sends analytical questions to the other teams. Their goal is to identify the targets and related associates, and prevent them from carrying out their plan. 11:24am Emma receives a system alert