Abstract: A system, method, and apparatus for collecting data streams, such as data packets, on a network, such as the Internet, are disclosed. A metadata portion of at least one of the data streams is analyzed on the network and evaluated using a metadata processing engine to identify a relationship between at least two of the plurality of data streams, e.g., a relationship between multiple users of interest, a new user of interest, etc. Evaluation of the metadata and the relationships can be performed algorithmically, as predetermined by an analyst or as provided as preset options by the network monitoring system (NMS). An interface manager can receive the new user of interest, evaluate the new user of interest for redundancy against existing users of interest of the NMS; then communicate the new user of interest to at least one access device to collect data streams associated with the new user of interest.

Abstract: A method and system related to a replication and decoding of an online message data between a person of interest (POI) and a correspondent of the POI through a proxy server. According to one embodiment, a method of communication capture includes collecting, at a system server, and processing at a service platform, a content data associated with an online text, audio, or video conversation between a POI and a correspondent of the POI, and replaying the content data through a combination of a client application emulator and a proxy server to generate a realistic representation of the content data. In addition, the method may include identifying a client application based on a metadata associated with the online chat conversation.

Abstract: A system, method, and apparatus for collecting data streams, such as data packets, on a network, such as the Internet, are disclosed. A metadata portion of at least one of the data streams is analyzed on the network and evaluated using a metadata processing engine to identify a relationship between at least two of the plurality of data streams, e.g., a relationship between multiple users of interest, a new user of interest, etc. Evaluation of the metadata and the relationships can be performed algorithmically, as predetermined by an analyst or as provided as preset options by the network monitoring system (NMS). An interface manager can receive the new user of interest, evaluate the new user of interest for redundancy against existing users of interest of the NMS; then communicate the new user of interest to at least one access device to collect data streams associated with the new user of interest.

Abstract: A system, method, and apparatus for intercepting data streams such as packets on a network. In one embodiment, the method includes: receiving at a network surveillance system (NSS), a target to be intercepted on the network; creating a target identification (target ID) for the target, wherein the target ID is unique to the NSS in order to track data streams of the target during subsequent processing, such as extraction of content and metadata, in the NSS; intercepting the data streams of the target on the network; tagging the data streams of the target that are intercepted from the network with a respective target ID; transmitting the data streams of the target to the NSS for subsequent analysis; and distributing the data streams across a scalable quantity of data processing engines in the NSS.

Abstract: Systems and methods of organizing a set of information associated with a record in a centralized database are disclosed. The record may be associated with a criminal investigation and/or a person of interest (POI). In one embodiment, the method includes creating a profile for the record and a corresponding set of data associated with the profile. The method also includes graphically clustering the set of information associated with the profile. In another embodiment, the method includes linking a data associated with a particular profile to another data associated with another profile based on a set of predetermined association factors. The method also includes generating a set of links and connections between a particular profile and a set of other profiles in the database. The method further includes visually representing the set of connections to a user of the system.