Fraud ring detayı

ip:192.0.2.101

MEDIUM risk Paylaşılan IP 3 müşteri 22 toplam sipariş

İlişki ağı

Müşteriler (3) isim · şehir · sipariş

Müşteri	Şehir	Sipariş
Fatma Aydın #7	İzmir	8
Mehmet Demir #2	Ankara	8
Volkan Aksoy #15	Adana	6

Bağlı cihazlar (1)

aaaaaaaaaaaa…

T-SQL evidence (workshop) sql/22-fraud-ring.sql

-- Paylaşılan IP — SHORTEST_PATH ile evidence chain
SELECT *
FROM (
    SELECT cn1.display_name AS start_customer,
           LAST_VALUE(cn2.display_name) WITHIN GROUP (GRAPH PATH) AS end_customer,
           STRING_AGG(cn2.display_name, ' → ') WITHIN GROUP (GRAPH PATH) AS hops
    FROM   graph.customer_node AS cn1,
           graph.uses_device   FOR PATH AS ud1,
           graph.device_node   FOR PATH AS dn,
           graph.uses_ip       FOR PATH AS ui,
           graph.ip_node       FOR PATH AS ip,
           graph.uses_device   FOR PATH AS ud2,
           graph.customer_node FOR PATH AS cn2
    WHERE  MATCH(SHORTEST_PATH(cn1(-(ud1)->dn-(ui)->ip<-(ui)-dn<-(ud2)-cn2)+))
) AS sp WHERE end_customer IS NOT NULL;