You are reviewing the IDS logs and during your analysis you notice a user account that had attempted to log on to your network ten times one night between 3 and 4 AM. This is quite different from the normal pattern of this user account, as this user is only in the office from 8AM to 6PM. Had your IDS detected this anomaly, which of the following types of detection best describes this event?

A.
External Intrusion

B.
Internal Intrusion

C.
Misuse Detection

D.
Behavioral Use Detection

E.
Hybrid Intrusion Attempt