Identity Graph Analysis
Synthetic clusters
7
open
Linked accounts
84
Loss prevented
$2.1M
Device Fingerprint Lab
| Device hash | Accounts | Risk |
|---|---|---|
| fp-88a2 | 6 | High |
| fp-11c0 | 2 | Med |
| North quay cutover | Open | Open |
| East yard sweep | Running | Running |
| Night batch 14 | On Track | On Track |
| Canary 10% | At Risk | At Risk |
| Blue-green 2.4 | Queued | Queued |
| Freeze window | Resolved | Resolved |
| Pager rewrite | Escalated | Escalated |
| Token ceiling | Pending | Pending |
| Shadow path | Open | Open |
| Guild review | Running | Running |
| License reclaim | On Track | On Track |
| Merge train | At Risk | At Risk |
| Eval nightly | Queued | Queued |
| Prompt budget | Resolved | Resolved |
| Board brief | Escalated | Escalated |
| SLA watch | Pending | Pending |
| Deny list | Open | Open |
| mTLS rotate | Running | Running |
Synthetic ID Patterns
SSN velocity + address fabrication signals.
Forensics Cases
CASE-SYN-09
Mule ring · 6 banks
Graph ML Scores
GNN AUC
0.97
Review queue
23
Evidence Chain
- Preserved device telemetry bundle
- Exported SAR package to FinCEN format
Threat Intel Feeds
Device consortiumIBAN blocklistKYC vendor
Forensics workspace
Chain-of-custody mode enabled
Fraud Forensics Lab journal
Session log for this simulated fraud desk. Not a live production feed.
| Event | Actor | When | Status | Score |
|---|---|---|---|---|
| Fraud weekday CSV open | Ops | 07:02 | On Track | 92% |
| Fraud desk record add | Ops | 07:14 | Running | 88% |
| Fraud P1 watch fire | Reviewer | 07:21 | Escalated | 41% |
| Fraud exception approve | Reviewer | 08:05 | Resolved | 95% |
| Fraud 07:00 schedule set | Sponsor | 08:12 | Queued | 74% |
| Fraud filter At Risk | Ops | 08:40 | On Track | 81% |
| Fraud row View open | Ops | 09:01 | Running | 86% |
| Fraud row Edit save | Reviewer | 09:18 | On Track | 90% |
| Fraud row Delete confirm | Reviewer | 09:33 | Resolved | 93% |
| Fraud role switch | Sponsor | 10:02 | Queued | 77% |
| Fraud mobile nav jump | Ops | 10:15 | On Track | 84% |
| Fraud seed pad to 20 | Ops | 10:22 | Running | 89% |
| Fraud schedule weekday | Sponsor | 11:00 | Pending | 68% |
| Fraud CSV download | Ops | 11:08 | On Track | 91% |
| Fraud idle reclaim | Reviewer | 12:01 | Open | 62% |
| Fraud token ceiling | Sponsor | 12:40 | At Risk | 49% |
| Fraud deny-list drift | Reviewer | 13:05 | At Risk | 53% |
| Fraud gold-path flake | Ops | 13:44 | Escalated | 47% |
| Fraud board pack draft | Sponsor | 14:10 | Queued | 71% |
| Fraud session keep-alive | Ops | 14:55 | On Track | 97% |
- Fraud Forensics Lab: opened weekday CSV for the live filter
- Fraud Forensics Lab: added a desk record from the rail
- Fraud Forensics Lab: P1 watch fired and stayed in session
- Fraud Forensics Lab: reviewer approved one exception
- Fraud Forensics Lab: scheduled 07:00 delivery on this device
Fraud Forensics Lab scorecards
Ten-plus working reports for this desk. Export carries the active filter.
| Report | Owner | Cadence | Status | Score |
|---|---|---|---|---|
| Fraud open queue | Ops | Weekdays 07:00 | Live | 91% |
| Fraud at-risk rollup | Reviewer | Fridays 16:00 | Live | 84% |
| Fraud executive brief | Sponsor | Monday 08:30 | Queued | 72% |
| Fraud exception log | Reviewer | Daily 18:00 | Live | 88% |
| Fraud capacity watch | Ops | Hourly | Running | 79% |
| Fraud board pack | Sponsor | First Monday | Pending | 61% |
| Fraud SLA burn | Ops | Weekdays 16:00 | On Track | 86% |
| Fraud audit extract | Reviewer | Month end | Queued | 70% |
| Fraud idle reclaim | Ops | Wednesdays | Open | 64% |
| Fraud token spend | Sponsor | Fridays 09:00 | Live | 81% |
| Fraud deny-list drift | Reviewer | Daily 06:00 | At Risk | 52% |
| Fraud gold-path CI | Ops | On merge | Running | 77% |
| Fraud skill coverage | Sponsor | Biweekly | Open | 66% |
| Fraud pager rewrite | Ops | Thursdays | Queued | 58% |
| Fraud license waste | Reviewer | Month start | Resolved | 93% |
| Fraud canary 10% | Ops | On deploy | On Track | 85% |
| Fraud incident drill | Ops | Monthly | Queued | 69% |
| Fraud shadow IT sweep | Reviewer | Monthly | At Risk | 48% |
| Fraud pairing rota | Sponsor | Weekly | Live | 82% |
| Fraud capacity bid | Ops | Monthly | Pending | 59% |
Fraud Forensics Lab export history
CSV of the visible filtered table. Cadence stays on this device for the session. Simulated — no outbound mail.
| Delivery | Owner | Cadence | Status | Score |
|---|---|---|---|---|
| Fraud weekday open-queue CSV | Ops | 07:00 | Live | 94% |
| Fraud at-risk Friday pack | Reviewer | 16:00 | Live | 87% |
| Fraud Monday exec brief | Sponsor | 08:30 | Queued | 73% |
| Fraud daily exception CSV | Reviewer | 18:00 | Live | 90% |
| Fraud hourly capacity dump | Ops | Hourly | Running | 80% |
| Fraud board pack ZIP | Sponsor | First Monday | Pending | 62% |
| Fraud SLA burn CSV | Ops | 16:00 | On Track | 85% |
| Fraud month-end audit | Reviewer | Month end | Queued | 71% |
| Fraud idle reclaim list | Ops | Wed 09:00 | Open | 65% |
| Fraud token spend CSV | Sponsor | Fri 09:00 | Live | 83% |
| Fraud deny-list delta | Reviewer | 06:00 | At Risk | 51% |
| Fraud gold-path report | Ops | On merge | Running | 78% |
| Fraud skill matrix export | Sponsor | Biweekly | Open | 67% |
| Fraud pager rewrite log | Ops | Thu 11:00 | Queued | 57% |
| Fraud license waste CSV | Reviewer | Month start | Resolved | 92% |
| Fraud canary summary | Ops | On deploy | On Track | 86% |
| Fraud incident drill pack | Ops | Monthly | Queued | 70% |
| Fraud shadow IT export | Reviewer | Monthly | At Risk | 47% |
| Fraud pairing rota CSV | Sponsor | Weekly | Live | 81% |
| Fraud capacity bid sheet | Ops | Monthly | Pending | 60% |