Data analysis system to facilitate investigative process

Patent metadata

Field	Value
Publication number	US-11892901-B2
Application number	US-202117445983-A
Country	US
Kind code	B2
Filing date	Aug 26, 2021
Priority date	Jan 18, 2017
Publication date	Feb 6, 2024
Grant date	Feb 6, 2024

Abstract

Disclosed are data gathering and analysis systems, methods, and computer-readable storage media to facilitate an investigation process. The method includes accessing a data object representing an investigative issue as part of initiating an investigative session. The method further includes causing presentation, on a display of a device, of a user interface configured to receive user search queries and present search results for each received search query. The method further includes tracking user activity including one or more user actions performed during the investigative session. The method further includes creating a record of the user activity, and linking the record of the user activity with the data object representing the investigative issue.

First claim

What is claimed is:

1. A system comprising:
one or more processors of a machine; and
a memory storing instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
causing presentation, by a first computing device, of a user interface configured to facilitate a first investigation session, the facilitating of the first investigation session including receiving user search queries and presenting search results for each received search query;
tracking user activity that includes one or more user actions performed by a user using the first computing device during the first investigation session, the one or more user actions including a search query provided as input by the user to the first computing device during the first investigation session;
modifying a data object, in a database, that represents an investigative issue associated with the first investigation session to include a reference to the one or more user actions;
transmitting, over a network, a set of machine-readable instructions to the first computing device or a second computing device that cause the first computing device or the second computing device, to present, during a second investigation session, a graphical representation of the user activity performed during the first investigation session based on the data object, the graphical representation of the user activity comprising a textual list of the one or more user actions, the textual list including a navigation link that, when selected, causes presentation of a set of search results corresponding to the search query input by the user during the first investigation session;
receiving a user selection of text included in a search result in the set of search results;
generating a token that includes the text;
identifying one or more additional instances of the token in a remainder of the set of search results; and
upon receiving a request to present one of the remainder of the set of search results, visually distinguishing the one or more additional instances of the token in the one of the remainder of the set of search results.

2. The system of claim 1 , wherein the set of machine-readable instructions comprise presentation data corresponding to the graphical representation of the user activity and a set of instructions to display the presentation data.

3. The system of claim 1 , wherein:
the search query provided as input by the user includes one or more filters; and
the set of search results are filtered according to the one or more filters.

4. The system of claim 1 , wherein:
the search query is a first search query;
the operations further comprise:
receiving a second search query that includes an identifier of the investigative issue; and
retrieving, using the identifier, the data object in response to the second search query, wherein causing presentation of the graphical representation of the user activity within the user interface is responsive to the second search query.

5. The system of claim 1 , wherein:
the data object is a first data object; and
the operations further comprise:
receiving user input signaling a linkage between the first data object and a second data object; and
linking the first data object and the second data object in response to receiving the user input.

6. The system of claim 5 , wherein the operations further comprise:
receiving a user generated textual note related to the linkage between the first data object and the second data object; and
storing the user generated textual note with a further linkage to the first data object and the second data object.

7. The system of claim 1 , wherein:
the data object is a first data object; and
the operations further comprise:
automatically linking the first data object with a second data object based on one or more similar properties included in the first data object and the second data object.

8. A method comprising:
causing presentation, by a first computing device, of a user interface configured to facilitate a first investigation session, the facilitating of the first investigation session including receiving user search queries and presenting search results for each received search query;
tracking user activity that includes one or more user actions performed by a user using the first computing device during the first investigation session, the one or more user actions including a search query provided as input by the user to the first computing device during the first investigation session;
modifying a data object, in a database, that represents an investigative issue associated with the first investigation session to include a reference to the one or more user actions; and
transmitting, over a network, a set of machine-readable instructions to the first computing device or a second computing device that cause the first computing device or the second computing device, to present, during a second investigation session, a graphical representation of the user activity performed during the first investigation session based on the data object, the graphical representation of the user activity comprising a textual list of the one or more user actions, the textual list including a navigation link that, when selected, causes presentation of a set of search results corresponding to the search query input by the user during the first investigation session;
receiving a user selection of text included in a search result in the set of search results;
generating a token that includes the text;
identifying one or more additional instances of the token in a remainder of the set of search results; and
upon receiving a request to present one of the remainder of the set of search results, visually distinguishing the one or more additional instances of the token in the one of the remainder of the set of search results.

9. The method of claim 8 , wherein the one or more user actions further include at least one selected from a group consisting of: a search result accessed by the user, a linkage between two or more data objects generated by the user, a user token created by the user, and a note created by the user.

10. The method of claim 8 , wherein:
the search query provided as input by the user includes one or more filters; and
the set of search results are filtered according to the one or more filters.

11. The method of claim 8 , wherein the search query is a first search query, wherein the method further comprises:
receiving a second search query that includes an identifier of the investigative issue;
retrieving, using the identifier, the data object in response to the second search query, wherein causing presentation of the graphical representation of the user activity within the user interface is responsive to the second search query.

12. The method of claim 8 , wherein:
the data object is a first data object; and
the method further comprises:
receiving user input signaling a linkage between the first data object and a second data object; and
linking the first data object and the second data object in response to receiving the user input.

13. The method of claim 8 , wherein:
the data object is a first data object; and
the method further comprises automatically linking the first data object with a second data object based on one or more similar properties included in the first data object and the second data object.

14. A machine-readable storage device embodying instructions that, when executed by at least one processor of a machine, cause the machine to perform operations comprising:
causing presentation, a first c

Assignees

• Palantir Technologies Inc

Inventors

• Skiff David
• Cai Allen
• Lee Benjamin
• Yu Christopher
• Kraytem Hind
• Ma Jason
• Scolnick Myles
• Benabdallah Tarik
• Shen Zhixian

Classifications

• G06F16/48

  Retrieval characterised by using metadata, e.g. metadata not derived from the content or metadata generated manually · CPC title

• G06F16/43

  Querying · CPC title

• G06F11/079 Primary

  Root cause analysis, i.e. error or fault diagnosis (in a hardware test environment G06F11/22; in a software test environment G06F11/36) · CPC title

• G06F16/248

  Presentation of query results · CPC title

• G06F16/2428

  Query predicate definition using graphical user interfaces, including menus and forms (G06F16/2423 takes precedence) · CPC title