-*- outline -*-

* modularity

add a way to select which detectors and actions to use

* actions

add more actions (instant message, IP blacklisting, ...)

** mail action

add a way to masquerade the from

** learning system

Add an action where the system doesn't send alerts but store all the
anomalies to be used as exceptions in the config latter.

* detectors

add more detectors (especially logout ones)

** time detector

Detect if a login is done in normal hours. Perhaps a need to take care
of the time zone.

* reload

Reload config on a signal