Glossary: Vulnerability Management and Monitoring

anomaly rule

Also written: anomaly, anomaly detection

An alert rule that fires on behavior far from the baseline, such as an account signing in at 3 a.m. for the first time or uploads 20 times the usual size.