One point I thought was particularly interesting was the configuration to only alert a manager after a threshold was crossed. Apparently that way you can’t search for “most thieving” employee.

There’s a linked pdf paper as well, though I didn’t read it. http://apps.olin.wustl.edu/faculty/pierce/cleaninghouse.pdf