The program aims to detect aggregated anomalous events by correlating host file system changes across space and time. Upon wavelet transformation of the activities' signature, unsupervised clustering was perform if the new activity is an anomaly.
- note wavelet transformation was a dummy code