I2 Analyst | Notebook !full!

❌ – A wire transfer from A→B is not the same as B→A. Always show arrows on financial and communication links.

❌ – i2 can generate a link chart audit trail . Use it. When a defense attorney asks how you concluded a link existed, you need the raw data timestamp. 5. i2 vs. Modern Alternatives | Tool | Best for | Weakness vs. i2 | |------|----------|------------------| | Palantir | Enterprise-scale, real-time | Cost, overkill for link analysis | | Maltego | OSINT & cyber targets | Less rigorous on temporal/transactional data | | Neo4j / Gephi | Graph DB exploration | No built-in investigative workflow | | Linkurious | Web-based collaboration | Shallow analytical depth | i2 analyst notebook

❌ – Don’t spend 45 minutes picking colors. Spend 45 minutes running network metrics. Presentation can come after analysis. ❌ – A wire transfer from A→B is not the same as B→A