On the other hand, the term unwanted refers to any information that enables the DFA to uncover the use of an automation. Data permanence of the automation on the system storage (automation files or metadata),
presence of suspicious software (e.g., tools and libraries used to build the automation) falls into this category. Even
an anomalous user behavior (e.g., use of applications never used before, abnormal accesses to files) may be considered
an unwanted evidence.