1. A method comprising: creating one or more context insight records representing an indication of a behavior of a service based on raw footprint data related to use of said service by a population of users; and analyzing said one or more context insight records to detect a dynamically defined anomaly of said service.