3.3 Process Workflow Based on Special Investigation Notebook

To investigate using a Special Investigation notebook, follow these steps:

Note:

For more information about each paragraph in the SI notebook, see the Special Investigation (SI) Notebook section.
  1. Execute the Click to Start Investigation paragraph.
  2. Enter required details to investigate in the Input Search Results paragraph and execute it.
  3. The Initial Screening Results paragraph will show the detail of matched entities. Re-execute to update configurations like “Top Critical Matches”, “No. of pre-hops to load”, and so on.
  4. The Entity Summary Risk Report paragraph is used to get summary of searched entity enter comma-separated entity ID and re-execute the paragraph.
  5. The Transaction Analysis paragraph shows the transaction related to searched entities. Users can visualize the result in multiple charts to analyze it. To update the minimum and maximum amount, update the values and re-execute the paragraph.
  6. The Graph Result of the Entity Search displays the searched entities graph till configured no. of hops. The graph on the screen is referred to as visible graph.
    Users can then manipulate the graph by expanding any high-risk entities or parties on unusual transactions to better understanding of the context and associated risk.

    Note:

    After updating any input in the paragraph, execute/re-execute the paragraph and execute all the below paragraphs.
  7. Users can execute all the following paragraphs to get a better understanding which helps for investigation.
    • Reference Data Sources
    • Countries
    • Risk Factors
    • Red Flags
    • All Transactions in Visible Graph
    • Network Disposition Score
    • Network Disposition Score Breakdown
    • Recommendation

    Note:

    Re-execute the Reference Data Sources paragraph to update the results of these paragraphs after changes in visible graph in the Graph Result of the Entity Search paragraph.
  8. You can add entries that are not linked to the case from graph by updating a case.
    To update a case:
    1. Navigate to the Investigation Toolkit tab in a case.
    2. Add entities by expanding any entity or delete entities by dropping from the visible graph.
    3. Click Update Case to add the account, customer, transaction, and external entities.

      Note:

      On updating a case, all the customers, accounts, derived entities, and transactions that are part of the visible graph and are not already part of the case are added to the case.