An institution is looking to alter an existing threshold-based monitoring scenario because it is generating too many alerts that do not yield suspicious activit...