DETECTING EVENTS OF INTEREST

Methods, systems, and apparatus, including computer program products, for detecting events of interest. In one aspect, a method includes generating a network traffic model that includes forecasted time series data representative of a frequency of actions related to a network traffic entity, and identifying that an event of interest has occurred based on a comparison of actual time series data related to the network traffic entity with the forecasted time series data.