I2 Analyst Notebook Today

❌ – Never put “John Smith + Visa card” in the same node. Split them. You lose the ability to see who else used that card.

| Tool | Best for | Weakness vs. i2 | |------|----------|------------------| | | Enterprise-scale, real-time | Cost, overkill for link analysis | | Maltego | OSINT & cyber targets | Less rigorous on temporal/transactional data | | Neo4j / Gephi | Graph DB exploration | No built-in investigative workflow | | Linkurious | Web-based collaboration | Shallow analytical depth | i2 analyst notebook