wiretrip

Finds suspicious automation by watching behavior, not message content.