An alert may be generated after an irregularity in behavior pattern on a local machine is detected.
Extortion, intimidation and destruction of property are all part of the behavior pattern.