Abstract: A system for analyzing a plurality of grouped incidents belonging to a group, the system having a database storing the plurality of grouped incidents and a GUI configured to receive from the database the plurality of group incidents and to display the plurality of group incidents. The GUI has a group interface that is configured to display one of a grouped incidents panel, a group visualization panel, or combinations thereof. The group has the plurality of grouped incidents, a plurality of grouped sources, and a group incident tag.

Abstract: Apparatus and method for investigating an analyzable incident for a period of time has a database to receive and store data sets, coupled to a data processing computer system that operates upon the data sets, and a display module comprising a graphical user interface (“GUI”). Each data set comprises a series of events comprising a timestamp, a source, and a content about the analyzable incident. The GUI comprises an event map, a control panel, and an annotation panel viewable in an event list view or a swimlane view. The event list view has a tabular list of the timestamp, source, and the content of each event. The swimlane view comprises a graphical representation of the timestamp and the source of each event, and a user selectable icon associated with the content of each event.