Given that there are very little real terrorists in the data, any sensitive detection mechanism will need insane specificity or it will give you an enormous amount of false positives.