Abstract: A system is provided for a data investigation system that is adapted to provide optimized data viewing for investigations using a network topology of relations between entities. The system includes a processor and a computer readable medium operably coupled thereto, to perform operations which include receiving, from a computing device, an investigation of a first entity having a first set of attributes, determining, based on the first set of attributes, a plurality of related entities associated with a plurality of events, determining whether each of the plurality of events meets or exceeds a risk threshold for the investigation of the first entity, generating a first relations graph of the first entity to one or more of the plurality of related entities based on one or more of the plurality of events meeting or exceeding the risk threshold, and displaying, on the computing device, the first relations graph.

Abstract: A system is provided for a data investigation system that is adapted to provide optimized data viewing for investigations using a network topology of relations between entities. The system includes a processor and a computer readable medium operably coupled thereto, to perform operations which include receiving, from a computing device, an investigation of a first entity having a first set of attributes, determining, based on the first set of attributes, a plurality of related entities associated with a plurality of events, determining whether each of the plurality of events meets or exceeds a risk threshold for the investigation of the first entity, generating a first relations graph of the first entity to one or more of the plurality of related entities based on one or more of the plurality of events meeting or exceeding the risk threshold, and displaying, on the computing device, the first relations graph.