Which type of rule is specifically designed to detect patterns over time rather than in single events or flows?

{} [+]