A team of sleuths at Akamai have been tasked with uncovering anomalous behaviors in how video players interact with the CDN. At their fingertips, these detectives have a fantastic dataset from which to look for clues and gather evidence…..MILLIONS (and even BILLIONS) of CDN log lines that include the world’s largest, latest and greatest OTT video services. No stone can be left unturned. Popular player platforms and applications are all under suspicion! In this talk, we will share case details of these investigations including: examples of suspicious behavior involving stream fetching, connection usage, and more the investigation methodology and the tools used for the job datasets and graphs to illustrate the above And then you can decide….Are the suspect players greedy and deceitful, or are they cooperative and compliant participants of the video ecosystem? We believe these investigations will lead to improved player/CDN interactions, resulting in better performance and efficiency for the video ecosystem that will ultimately benefit the end-user experience. Presented at Demuxed 2020.