Takes a thief to catch a thief I guess? ;-) I wish you luck and if you succeed I'm sure that there will be some three letter agencies knocking on your door. I'

Takes a thief to catch a thief I guess? ;-) I wish you luck and if you succeed I'm sure that there will be some three letter agencies knocking on your door. I've had some luck using off-the-shelf clustering algorithms but they are too CPU intensive to run real time and require an investigator to interpret (great productivity boost though).