Reduce alert volume and increase suspicious activity detection​