Before revision:  Events in violation of their occurrence probability (i.e., event occurrences with small occurrence probability, and absent events with large occurrence probability) are identified as abnormal.
After revision:  Events in violation of their occurrence probability are identified as abnormal.