IDENTIFYING ANOMALOUS BEHAVIOR OF A MONITORED ENTITY

摘要

Described herein are techniques for identifying anomalous behavior of a monitored entity. Features can be extracted from data related to operation of an entity. The features can be mapped to a plurality of states to generate a state sequence. An observed value of a metric can be compared to an expected value of the metric based on the state sequence.