Mining changing regions from access-constrained snapshots: a cluster-embedded decision tree approach