Have a "Learning Phase"

I think the application should have an initial "learning phase" that would allow the application to establish a baseline for the computer and to eliminate false positives!