The geographic distribution analysis problem was based on
real events so with the benefit of hindsight we are able to
know, more or less, what happened.
As best can be determined the "blue' events were carried
out by small teams of insurgents seeking to attack early
morning military and police convoys that used the main
road. The teams infiltrated the area for a few days at a
time. Under cover of darkness and/or the early morning
hustle and bustle they would plant their IEDs, detonate
them, and then flee the area.
The "red" incidents were more interesting. Their pattern
suggested that they were somehow distinct from the others.
All took place in close proximity geographically. They also
occurred on the weekend. These facts raised the suspicion
that one individual, a local resident with a regular job,
was responsible. Security forces eventually discovered a
well equipped bomb making workshop hidden in a small
outbuilding. The owner of the building disappeared shortly
before his shop was raided. It appears that he had been
conducting his own private mini-Jihad against international
and local security forces.