This document demonstrates how tracking data from GPS tags and other sources can be analyzed in ICU Workbench and integrated into IBM i2 Analyst's Notebook to assist an investigation. ICU Workbench identified unusual patterns in a person of interest's movements. When this data was exported to i2, it revealed connections between individuals that helped uncover a relationship involving bribery between a criminal gang and a court official. Analyzing tracking data in this integrated way provided valuable intelligence that helped resolve the case.

1. IBM i2/G2
Demonstration

2. Analysing tracking data using
ICU Workbench and IBM i2
Problem: Surveillance activities generate large volumes of tracking data from
covert GPS tags, navigation systems, cellular phones, cellular carriers (CDR/CCR
records), geo-located financial transactions, ANPR data – but there is no way to
easily increase the value of the i2 analysis with this valuable tracking data.
ICU Workbench quickly analyzes tracking data, turning it into valuable information
that can be imported into i2’s Analyst Notebook increasing the value and
completeness of the Analysts Notebook solution substantially.
The spatial context (analysed track) of targets, when mated with other i2 data
entities, is a very powerful and unique aid to complex investigations.
These slides accompany a video that demonstrates how tracking data can be
quickly analysed by G2 Research's ICU Workbench software and made available to
IBM’s i2 Analysts Notebook in order to surface non-obvious linkages between a
networks of suspects.

3. Situation
• A criminal gang in California has been under surveillance for 6 months
where they have been sighted in and around the County court house. Data
is based on various GPS/cellular tracking devices.
• Local law enforcement have received a complaint regarding a “Walter
Rogers” from an anonymous court house source.
• We have been asked to investigate using the ICU Workbench and i2
Toolset.
• There are no connections apparent using the i2 platform and datasources.

4. Load Data to G2 ICU WorkBench
Load Criminal Gang
location based tracking
data into ICU Workbench
Load 6 months of data
across the entire
network of surveillance
targets

5. Pattern of Life Analysis highlights
unusual behaviour
Analysing Walter
Rogers pattern of life
reveals unusual
working hours

6. Multi Target Correlation reveals who
the subject might have been meeting
Correlate all the data
subjects to see who has
had the potential to
talk to who
Analysis reveals Walter
Rogers has the
potential to meet a
number of gang
members

7. Export Multi Target Correlation results
to i2 for further analysis/correlation
Export Data into i2 Analysis
Warehouse
IBM i2
Intelligence
Repository
IBM i2
Analyst’s
Notebook

8. i2 Visualises who Walter Rogers has
had the opportunity to talk to
Use the i2 tools to find
Walter Rogers in the
repository.
Once found create a
visualisation of all the
potential meetings
Find Walter
Rogers
Chart helps visualise:
• 4 potential interactions at the
County Courthouse
• 5 potential targets

9. i2 Highlights Walter Rogers potential
meetings
The i2 tools help give
context to people on the
chart.
The Activity View quickly
reveals the pattern of
the potential meetings
Walter Rogers was
involved with.
Two of the five targets are
known gang members: Barny
Leeson and Ralphie Barrow
The activity view highlights unusual
behaviour from the gang member
Barny Leeson, it looks possible he is
monitoring Walter Rogers

10. Visualizing the ICU Workbench results
in i2 reveals a hidden link
Find and map the gang
member Barny Leeson’s
known locations, confirm
where he has been going
Further analysis
shows Barny
Leeson and Charles
Campbell have
been visiting all the
same locations
i2 finds a relationship
between the places
Barney Leeson has
been going and a
court official named
Charles Campbell.
Charles has been
visiting the same
places.

11. Analysing the hidden link
i2 uncovers that the hidden link
(Campbell) resolves to another
meeting, i2 Analysis shows us it
is with another known gang
member (Ralphie Barrow)
outside a DIY store
Link analysis reveals Charles’
relationship to Ralphie Barrow
The Activity View shows Charles and
Ralphie to have visited the store
location at exactly the same times.

12. Making the Connection
Using the ICU Workbench results, mated with i2’s integration with other data
stores, we can now find relationships that were impossible before.
Search IAP for
Charles Campbell
Also finds an
Automated Money
Laundering record
showing Campbell
making a large
cash deposit
Finds a report highlighting
Campbell going to a bank shortly
after the Burrows meeting
Search IAP for
Ralphie Barrow Existing i2 chart stored in repository reveals a phone call
between the Gang Leader, Desmond Martinez, Ralphie
Barrow and a large cash withdrawal on the day of the
Campbell meeting

13. The Connection Explained
Walter
Rogers
Ralphie
Barrows
Barney
Leeson
Desmond
Martinez
Charles
Campbell
ICU Workbench
identifies Pattern
of Life is peculiar.
Investigation
begins.
Barney
Appears to
be
following
Walter
Cell phone call
meets with
I2 finds Financial Transactions
indicating bribery between
Charles Campbell and the
Gang Leader, Desmond.
This connection could not
have been found without
using the tracking data inside
i2 to identify that Ralphie
met with Charles at Home
Depot.
Gang
Member
Court
Reporter
I2 finds Cellular phone
calls between Ralphie
and Desmond
ICU Workbench finds
meetings between
individuals by
analyzing GPS tracking
data
meets with
meets with

14. Scenario Summary
Analysed geo-temporal data
provides valuable intelligence to
public safety agencies. The ICU
Workbench’s extension to the
Analyst Notebook complements
our conventional processes and
data repositories to deliver an
enriched link analysis
product. The inclusion of this
extension provides analytical
capability on tracking data that
was not previously accessible in
the Analyst Notebook.