Text this: Practical Intrusion Analysis :