Fraud Triangle Analysis

View the GitHub project here or download the latest release here.

Overview

The Fraud Triangle is the concept that there are 3 common factors in communications regarding fraud:

1. Opportunity - The perceived ability to get away with fraud (weak safeguards, etc)
2. Pressure - The need to commit fraud (money needs, etc)
3. Rationalization - The individuals committing fraud rationalizing the act

This script assists in surfacing these types of commincations by searching for items which have matches against words or phrases present in several word lists. The script comes with several words lists to get you started, but these are not exhaustive and it is recommended you enrich them with words relevant to your data. The word lists included are:

• Fraud Triangle Analysis - Opportunity
• Fraud Triangle Analysis - Pressure
• Fraud Triangle Analysis - Rationalization

The script generates a CSV with:

• Named Query
• Email Address
• Total Email Items with this Address (You can choose which address fields are searched)
• Total Emails with Opportunity Word List Hits
• Total Emails with Pressure Word List Hits
• Total Emails with Rationalization Word List Hits
• Percentage of Total Emails with Opportunity Word List Hits
• Percentage of Total Emails with Pressure Word List Hits
• Percentage of Total Emails with Rationalization Word List Hits

Note: Named Query column is only populated for rows generated from a named query and Email Address is only populated for rows generated from an email address.

Additionally the script can apply tags to items based upon which categories and email addresses had a match. The tag name applied is specified with a tag name template that accepts the following placeholders:

The default tag template is:

Fraud Triangle|{category}|{id}

Which might resolve to tags such as:

• Fraud Triangle|Opportunity|[email protected]
• Fraud Triangle|Pressure|[email protected]
• Fraud Triangle|Rationalization|[email protected]
• Fraud Triangle|Opportunity|ImportantQueryName
• And so on...

Getting Started

Setup

Begin by downloading the latest release of this code. Extract the contents of the archive into your Nuix scripts directory. In Windows the script directory is likely going to be either of the following:

• %appdata%\Nuix\Scripts - User level script directory
• %programdata%\Nuix\Scripts - System level script directory

This script requires that 3 words lists have been created/imported in Nuix:

• Fraud Triangle Analysis - Opportunity
• Fraud Triangle Analysis - Pressure
• Fraud Triangle Analysis - Rationalization

If any of these word lists cannot be located, the script will show a warning on startup and then close. Releases of this script contain basic example word lists to get you started in the Word Lists sub-directory of the downloaded release archive. They can be copied to one of the following locations to make them visible to Nuix:

Cloning this Repository

This script relies on code from Nx to present a settings dialog and progress dialog. This JAR file is not included in the repository (although it is included in release downloads). If you clone this repository, you will also want to obtain a copy of Nx.jar by either:

1. Building it from the source
2. Downloading an already built JAR file from the Nx releases

Once you have a copy of Nx.jar, make sure to include it in the same directory as the script.

License

Copyright 2019 Nuix

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.