Towards a hybrid method to categorize interruptions and activities in healthcare