In particular, within the context of abuse and network intrusion detection, the appealing objects are sometimes not uncommon objects, but unexpected bursts of inactivity. This pattern won't adhere on the typical statistical definition of an outlier for a rare item. By following these methods,