various network activity profiling processes can be applied to attempt to detect this activity it's just simple mfata mu ntoki umuzingo narohama mu kirere cyiza