detect risk behavior