Search

Email analysis

Timeline Intelligence and Security

Use this showcase if you’re building an application where users need to identify unusual behavior in high-volume communication data. It shows how thousands of emails can be aggregated into a visual timeline, painting a picture of routine working patterns that enables users to easily recognize any unusual behavior.

What the showcase demonstrates

The showcase visualizes around 14,000 emails exchanged inside an organization. Each row represents a person, with employees grouped by role so analysts can compare patterns without reading through individual messages.

KronoGraph’s scale wrapping feature lets the timeline switch from a continuous sequence to daily or weekly views. That changes the type of questions users can ask. Instead of only seeing when emails happened, they can compare equivalent periods and spot behavior that falls outside the usual rhythm of the company.

The heatmap can show all emails or focus on sent and received activity. Users can filter the timeline by role in the company, and switch annotations on or off.

In this example, analysts can see when the CEO typically starts work, or identify an employee who often sends group emails at unusual hours. Annotations can easily mark events of interest directly on the timeline.

What you can evaluate

For product and engineering teams, this showcase demonstrates how the SDKs can support time-based analysis of communications data. It highlights scale wrapping, heatmap aggregation, role-based filtering, annotations and exportable timeline views.

The workflow supports a core pattern-of-life task: establish the normal rhythm of communication, then focus on the messages that stand out.

More from Cambridge Intelligence

See all →
Intelligence and Security

Data fusion investigations

Use this showcase if you’re building an investigation application that needs to connect different data types that complement each other. It shows how a synchronized graph, timeline and map can turn lawful-intercept-style data into a single tool that offers investigators a clearer account of a person’s activity.

View showcase

Intelligence and Security

Phone call analysis

Use this showcase if you’re building an application where analysts need to reconstruct the sequence of calls between people. A network view can show that two individuals are connected, but the timing and volume of their calls can reveal whether that contact was routine, unusual or escalating.

View showcase

Intelligence and Security

OSINT timeline

Use this showcase if you’re building an application where analysts need to make sense of open source intelligence as a sequence of activity, not just a collection of records. News articles, social posts, and message data can quickly become fragmented. Arranged chronologically, those sources start to show how a situation developed and how different individuals reacted, both publicly and privately.

View showcase

Terms of use

These terms do not alter or supersede any existing agreements between you (or your employer) and us.

By accessing or using any Content you agree to be bound by these Terms of Use. Please review these terms carefully before using the website.

The contents of this website, including but not limited to any text, code samples, API references, schemas, interactive tools, and other materials (collectively, the 'Content'), are made available for informational and internal evaluation purposes only. All intellectual property rights in the Content are reserved. No licence is granted to use the Content for any commercial purpose, or to copy, distribute, modify, reverse-engineer, or incorporate any part of the Content into any product or service, without our prior written consent.

This Content is provided “as is” and “as available,” without any representations, warranties, or guarantees of any kind, whether express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, non-infringement, or accuracy. To the fullest extent permitted by applicable law, we expressly exclude and disclaim all implied warranties, conditions, and other terms that might otherwise be implied.

We disclaim all liability for any loss or damage, whether direct, indirect, incidental, consequential, or otherwise, arising from any reliance placed on the Content or from your use of it, to the fullest extent permitted by applicable law. By continuing to access or use the Content, you acknowledge and agree to these terms.