System and Method for Information Lifecycle Management of Investigation Cases

摘要

Various agencies, such as law enforcement and intelligence agencies, deploy monitoring centers that monitor communication networks and analyze the monitored communication. One possible way to reduce storage cost is to apply Information Lifecycle Management (ILM) techniques, which store the content to multiple storage tiers having different performance levels. The monitoring center processes the various items of content in the context of investigation cases. given investigation case may be assigned a certain status, e.g., active or closed. The monitoring center comprises an ILM server that assigns content items to storage tiers based on the investigation cases with which the content items are associated. The ILM server may analyze the state of a given investigation case, and selects an ILM policy based on the state of the case. The ILM policy specifies the storage tier (or tiers) to be used for storing items of data associated with the case.