Metronome technology uniquely passively collects rich data of all on line events. The data is processed by Metronome modules to filter, decrypt, sessionize, process, extract, aggregate and extract the complex data to be used in business and forensics applications. The normalized data now can be used for malicious use detection, business analytics, data mining, optimization forensics, business intelligence, big data loading and visitor replay.