1. A method of monitoring a network, the method comprising: receiving a known user ID associated with a known user of interest to be monitored at an access device; receiving an identification of an analyst who is approved to receive a collected data of the known user of interest; retrieving data streams from the network for the known user of interest; and transmitting data streams of the known user of interest only to the analyst who is approved to receive the collected data of the known user of interest.