Computer software for use in detecting terrorist surveillance of a facility and other pre-attack preparations on a facility or on persons associated with a facility