1. An apparatus for use in analyzing network data, the apparatus including an electronic processing device that: a) determines network data representing a network having a number of nodes and links between the nodes; b) selects a model in accordance with a data type associated with the network data, the model being indicative of: i) at least one trigger for a behaviour of interest; ii) selected network metrics; and iii) a mathematical relationship relating network nodes to the at least one trigger using the selected network metrics; and, c) determines at least one trigger associated with the network data; d) determines the selected metrics for the network data; and, e) uses the mathematical relationship, the selected network metrics and the identified at least one trigger to determine predicted nodes, the predicted nodes being nodes predicted to exhibit behaviour of interest.