1. A computer system to assist a human analyst in analyzing large amounts of money laundering related data, the computer system comprising: one or more computer readable storage devices configured to store: one or more software modules including computer executable instructions, the one or more software modules including a rules engine module and a workflow engine module; a plurality of entity data items; a plurality of Internet Protocol address data items; a plurality of entity activity data items, the entity activity data items each associated with: a user, an Internet Protocol address, an investigation, or one or more respective financial accounts, and at least one entity data item of the plurality of entity data items; a plurality of money laundering indicators; a clustering strategy; and a plurality of money laundering scoring criteria; and one or more hardware computer processors in communication with the one or more computer readable storage devices and configured to execute the computer executable instructions of the one or more software modules in order to cause the computer system to: designate, by the rules engine module, one or more seeds by: accessing, from the one or more computer readable storage devices, the plurality of entity data items, the plurality of Internet Protocol address data items, and the plurality of the entity activity data items; determining a first Internet Protocol address from the plurality of Internet Protocol address data items associated with a first entity data item of the plurality of entity data items, wherein a computing device associated with the first entity data item was assigned the first Internet Protocol address; comparing the plurality of money laundering indicators to the plurality of entity activity data items associated with the first entity data item to determine whether the first entity data item satisfies money laundering indicators that include: determining that the first Internet Protocol address corresponds to a first geographic area within predetermined first high-risk geographic areas for money laundering; determining that the plurality of entity activity data items includes a first entity activity data item where the first Internet Protocol address was used to access a first financial account; determining a first amount associated with the first financial account; determining a transaction amount associated with the first financial account; and determining that the transaction amount relative to the first amount corresponds to a predetermined percentage, wherein the predetermine percentage corresponds to a remaining amount that is indicative of a potential money laundering fee; and designating the first entity data item as a seed; for the designated first entity data item seed: identify, by the rules engine module, one or more entity activity data items determined to be associated with the designated first entity data item seed based at least on the clustering strategy, wherein the clustering strategy queries the one or more computer readable storage devices to determine at least one of: one or more users associated with the designated first entity data item seed, one or more Internet Protocol addresses associated with the designated first entity data item seed, one or more financial accounts associated with the designated first entity data item seed, or one or more investigations associated with the designated first entity data item seed; generate, by the rules engine module, a cluster based at least on the designated first entity data item seed, wherein generating the cluster comprises: adding the designated first entity data item seed to the cluster; adding the one or more entity activity data items to the cluster; identifying an additional one or more entity activity data items associated with any data item of the cluster; adding the additional one or more entity activity data items to the cluster; and storing the generated cluster in the one or more computer readable storage devices; score the cluster by: determining raw score values for each of the satisfied money laundering indicators associated with the first entity data item; and based on at least one of the plurality of money laundering scoring criteria, determining a score for the first entity data item based at least on the determined raw score values of the satisfied money laundering indicators and a quantity of satisfied money laundering indicators, wherein the determined score is indicative of a likelihood that the first entity data item is associated with money laundering; and cause presentation, by the workflow engine module, of the cluster and the score for the first entity data item in a user interface of a client computing device.
1. A computer system to assist a human analyst in analyzing large amounts of money laundering related data, the computer system comprising: one or more computer readable storage devices configured to store: one or more software modules including computer executable instructions, the one or more software modules including a rules engine module and a workflow engine module; a plurality of entity data items; a plurality of Internet Protocol address data items; a plurality of entity activity data items, the entity activity data items each associated with: a user, an Internet Protocol address, an investigation, or one or more respective financial accounts, and at least one entity data item of the plurality of entity data items; a plurality of money laundering indicators; a clustering strategy; and a plurality of money laundering scoring criteria; and one or more hardware computer processors in communication with the one or more computer readable storage devices and configured to execute the computer executable instructions of the one or more software modules in order to cause the computer system to: designate, by the rules engine module, one or more seeds by: accessing, from the one or more computer readable storage devices, the plurality of entity data items, the plurality of Internet Protocol address data items, and the plurality of the entity activity data items; determining a first Internet Protocol address from the plurality of Internet Protocol address data items associated with a first entity data item of the plurality of entity data items, wherein a computing device associated with the first entity data item was assigned the first Internet Protocol address; comparing the plurality of money laundering indicators to the plurality of entity activity data items associated with the first entity data item to determine whether the first entity data item satisfies money laundering indicators that include: determining that the first Internet Protocol address corresponds to a first geographic area within predetermined first high-risk geographic areas for money laundering; determining that the plurality of entity activity data items includes a first entity activity data item where the first Internet Protocol address was used to access a first financial account; determining a first amount associated with the first financial account; determining a transaction amount associated with the first financial account; and determining that the transaction amount relative to the first amount corresponds to a predetermined percentage, wherein the predetermine percentage corresponds to a remaining amount that is indicative of a potential money laundering fee; and designating the first entity data item as a seed; for the designated first entity data item seed: identify, by the rules engine module, one or more entity activity data items determined to be associated with the designated first entity data item seed based at least on the clustering strategy, wherein the clustering strategy queries the one or more computer readable storage devices to determine at least one of: one or more users associated with the designated first entity data item seed, one or more Internet Protocol addresses associated with the designated first entity data item seed, one or more financial accounts associated with the designated first entity data item seed, or one or more investigations associated with the designated first entity data item seed; generate, by the rules engine module, a cluster based at least on the designated first entity data item seed, wherein generating the cluster comprises: adding the designated first entity data item seed to the cluster; adding the one or more entity activity data items to the cluster; identifying an additional one or more entity activity data items associated with any data item of the cluster; adding the additional one or more entity activity data items to the cluster; and storing the generated cluster in the one or more computer readable storage devices; score the cluster by: determining raw score values for each of the satisfied money laundering indicators associated with the first entity data item; and based on at least one of the plurality of money laundering scoring criteria, determining a score for the first entity data item based at least on the determined raw score values of the satisfied money laundering indicators and a quantity of satisfied money laundering indicators, wherein the determined score is indicative of a likelihood that the first entity data item is associated with money laundering; and cause presentation, by the workflow engine module, of the cluster and the score for the first entity data item in a user interface of a client computing device. 2. The computer system of claim 1 , wherein determining whether the first entity data item satisfies money laundering indicators further includes: determining that the plurality of entity activity data items further includes a second entity activity data item where a second Internet Protocol address was used to access the first financial account, wherein the second Internet Protocol address corresponds to a second geographic area within predetermined second high-risk geographic areas for money laundering, and wherein the first and second high-risk geographic areas correspond to a potential money laundering route.