Patent attributes
A method comprises a client executing on a processor of a UE, where the client is monitoring an application log and communication log for a plurality of user applications and communication applications. The client measures a volume of transactions and a set of performance metrics associated with UE resource usage. The client generates a custom device profile that establishes baselines for each of the plurality of user applications and identifies any deviations from the baselines. The client creates a bounded threshold based on the deviations, and detects that at least one of the plurality of user applications has exceeded the bounded threshold. The client determines that the bounded threshold was exceeded based on an application trigger and a network trigger, and in response, initiates a response action. The client also captures the communication log, the application log and application cache corresponding to the user application.