This is ultimately what will drive stochastic based device monitoring. How long was your laptop open? Which apps were foreground with a moderate amount of activity?