On building a worm detector | TickerVault