Consider a system that generates $10$ million audit records per day. Assume that, on average, there are $10$ attacks per day on this system and each attack is reflected in $20$ records