The objective of Consider is to detect and report various types of changes related to specific targets and/or specific networks. The primary advantage of Consider over traditional alert systems is that Consider monitors changes in networks and not just specific targets.

For instance, a typical lawful phone interception solution can issue an alert if a particular target (A) receives or makes new calls. This can be refined with filters for what types, origins, destinations, call duration, etc. justify issuing an alert. But, if the target (A) had previously called another phone (B) and subsequently B called C which in turn called D, the user would not know about D because C and D were unknown to the user at the time the alert definitions were set.

Consider, on the other hand, looks beyond the first generation of relationships with the target. It is enough to define a job to monitor phone A's network, and automatically, the system will detect and report activity of new members of the nework such as C and D even if they were previously unknown.

These principles can be applied to any type of data and application, not just call data records.

Consider can detect and report changes including:

  • Addition or removal of network members

  • New and changed associations within the network

  • Changes in relationship attributes

  • Changes in network attributes

  • Specific types of events related to one or more members in the network

  • Network behavior trends

  • Other changes and trends

    Network behavior trends and analysis can be conducted on one of three levels:

  • Individual objects

  • Pairs of objects

  • Groups/clusters of objects

    Consider includes the possibility of reporting alerts on the basis of threshold levels of various indicators or changes. Another type of report can be issued if the system predicts that the trend of a particular set of indicators shows that a threshold will be exceeded within a given time in the future.

    Consider automatically analyzes networks on a periodic basis. The user may define multiple networks to be analyzed and the frequency of analysis (daily, weekly, etc.). Each network may be assigned to one or more analysts who automatically receive reports (by email or other means) describing changes in the networks. The issuance of the reports can be limited to particular situations so that the analysts will receive reports only when certain types or magnitudes of changes occur in the network.

    The reports are issued as an html document which contains details of the changes detected. They can also contain hyperlinks directly to Contextor , allowing the user to automatically view network link charts.