[nullindividual]

What would you define as 'suspicious'? How would you distinguish suspicious from not suspicious?

[eviks]

Frequency, network use, running unknown executables