delete mac system file
add sigma anomaly detection method
fix bugs