5. The computer-implemented method of claim 1 , wherein identifying the plurality of n-grams within the behavioral trace comprises identifying the plurality of n-grams within a substring of the behavioral trace.
5. The computer-implemented method of claim 1 , wherein identifying the plurality of n-grams within the behavioral trace comprises identifying the plurality of n-grams within a substring of the behavioral trace. 6. The computer-implemented method of claim 5 , wherein identifying the plurality of n-grams within the substring of the behavioral trace comprises identifying the plurality of n-grams within a prefix of the behavioral trace.