(CPU, RAM, Disk, Logs)

(Normalize, Vectorize Data)

(Unsupervised ML Detector)

(No risky deviation seen)

(Abnormal Score Detected)

System stable & healthy

(Block IP / Kill Process /

Disable User / Isolate VM)