However, over time, the events may accumulate to form a sort of pattern that may be worthy of an alarm (e.g., the same person attempting access to many different restricted files over a period of time or a group of people continually attempting access to a particular restricted file).