{Process history based detection method, e.g. whereby history implies the availability of large amounts of data}