Glossary: Passwords, Automation and AI in Security Operations
anomaly detection
Automatically comparing activity with a baseline of normal and raising an alert, with a reason, when something falls outside it. It is a behavior-based (heuristic) method, unlike signature detection, which looks for known bad patterns.
Where the book teaches it
Related terms
baselineanomalysignature detectionheuristic detectionimpossible travelAI-augmented baseline