Many people perceive intrusion detection to be a constant, all-the-time security function. Identify and describe at least two part-time intrusion detection operational models, and for each give an example of a usage scenario that would call for part-time monitoring.