A method of target based Lawful Interception for use in a communication network, the method comprising: interpreting, by a network device, an LI target of a Law Enforcement Agency based on LI target information provided by the LEA; determining, by the network device, LI content required by the LEA and at least one LI trigger associated with the LI content based on an analysis of the LI target information wherein the determination of the at least one LI trigger is based on an identification of one or more trigger detection network nodes based on a network node lookup table; monitoring, by the network device, ongoing communication session associated with the LI target to detect matching of the at least one LI trigger; processing, by the network device, duplicated LI content in response to matching of the at least one LI trigger, wherein the duplicated LI content captures at least a part of the LI content in the ongoing communication session of the LI target, wherein processing duplicated LI content comprises: initiating sending at least a part of the duplicated LI content based on matching of at least one start LI trigger from the at least one LI trigger; and terminating sending at least a part of the duplicated LI content based on matching of at least one stop LI trigger from the at least one LI trigger; inserting, by the network device, at least one marker tag in the duplicated LI content to generate marked LI content; and sending, by the network device, the marked LI content and a notification comprising information associated with matching of the at least one LI trigger and the at least one marker tag to the LEA. interpreting, by a network device, an LI target of a Law Enforcement Agency based on LI target information provided by the LEA; determining, by the network device, LI content required by the LEA and at least one LI trigger associated with the LI content based on an analysis of the LI target information wherein the determination of the at least one LI trigger is based on an identification of one or more trigger detection network nodes based on a network node lookup table; monitoring, by the network device, ongoing communication session associated with the LI target to detect matching of the at least one LI trigger; processing, by the network device, duplicated LI content in response to matching of the at least one LI trigger, wherein the duplicated LI content captures at least a part of the LI content in the ongoing communication session of the LI target, wherein processing duplicated LI content comprises: initiating sending at least a part of the duplicated LI content based on matching of at least one start LI trigger from the at least one LI trigger; and terminating sending at least a part of the duplicated LI content based on matching of at least one stop LI trigger from the at least one LI trigger; initiating sending at least a part of the duplicated LI content based on matching of at least one start LI trigger from the at least one LI trigger; and terminating sending at least a part of the duplicated LI content based on matching of at least one stop LI trigger from the at least one LI trigger; inserting, by the network device, at least one marker tag in the duplicated LI content to generate marked LI content; and sending, by the network device, the marked LI content and a notification comprising information associated with matching of the at least one LI trigger and the at least one marker tag to the LEA.