Abstract: A computer implemented method comprising: monitoring a plurality of processes relating to a plurality of applications and using a plurality of computing resources, at least some of the processes relating to a user activity; analyzing the use of the computing resources by each of the processes; analyzing the user activity in respect to the processes; and classifying the processes in respect to the analyzed user activity, wherein the monitoring; the processing; the analyzing use; the analyzing user activity; and the classifying, are carried out during running the processes, and wherein at least one of: the monitoring; the processing; the analyzing use; the analyzing user activity; and the classifying, is performed by at least one computer.