A method for providing lawful interception information for an Internet of Things network, the method being performed by a topology of probes and comprising: receiving, through an interface, a request for information about a lawful interception target, the request including a specification for the information to be tracked and reported, the specification including information to be reported, and one or more reporting requirements; determining, from the specification, a plurality of information elements to be tracked along with at least one of criticality and/or importance, priority, and frequency of reporting associated with each of the plurality of information elements; determining one or more primary information elements from the plurality of information elements based on at least one of an information type, the criticality, the priority, and the frequency of reporting determined for each information element of the plurality of information elements; determining one or more underlying information elements for each of the one or more primary information elements from the plurality of information elements based on at least one of the information type, the criticality, the priority, and the frequency of reporting determined for each information element; generating a hierarchy of the one or more primary information elements and the one or more underlying information elements based on elementary dependency relationships from the specification and in consideration of at least one of information type, criticality, priority and frequency of reporting; determining a set of data sources for providing the requested information according to the hierarchy of information elements; determining a hierarchy of probes based on the set of data sources; configuring the topology of probes based on a set of configurations; activating lawful interception operation in the topology of probes; performing lawful interception operation by the topology of probes; verifying effectiveness of reporting conforming to the reporting requirements and taking corrective action; and updating learning data in a historical database at the end of lawful interception operation. receiving, through an interface, a request for information about a lawful interception target, the request including a specification for the information to be tracked and reported, the specification including information to be reported, and one or more reporting requirements; determining, from the specification, a plurality of information elements to be tracked along with at least one of criticality and/or importance, priority, and frequency of reporting associated with each of the plurality of information elements; determining one or more primary information elements from the plurality of information elements based on at least one of an information type, the criticality, the priority, and the frequency of reporting determined for each information element of the plurality of information elements; determining one or more underlying information elements for each of the one or more primary information elements from the plurality of information elements based on at least one of the information type, the criticality, the priority, and the frequency of reporting determined for each information element; generating a hierarchy of the one or more primary information elements and the one or more underlying information elements based on elementary dependency relationships from the specification and in consideration of at least one of information type, criticality, priority and frequency of reporting; determining a set of data sources for providing the requested information according to the hierarchy of information elements; determining a hierarchy of probes based on the set of data sources; configuring the topology of probes based on a set of configurations; activating lawful interception operation in the topology of probes; performing lawful interception operation by the topology of probes; verifying effectiveness of reporting conforming to the reporting requirements and taking corrective action; and updating learning data in a historical database at the end of lawful interception operation.