Baseline Development and Anomaly Detection Questions

Establishing baselines of normal behavior and designing anomaly detection to surface deviations. Topics include selecting features for user and system behavior, statistical baseline techniques and time series analysis, machine learning approaches such as clustering and classification, thresholding and seasonal adjustments, techniques to reduce false positives, monitoring model drift, and building feedback loops to refine detectors.