Practical algorithms for subgroup detection in covert networks