This is likely. They store everything then decrypt as necessary in a continuous batch mode as targets are identified. It looks like they have some sort of ale

This is likely. They store everything then decrypt as necessary in a continuous batch mode as targets are identified. It looks like they have some sort of alerting system for real-time "incident surfacing" for things they feel they need to react to quickly, but I imagine most of their work is over the longer-term as far as building profiles of their targets.