An isolation forest over five minute windows of Sentinel's system telemetry, scored against a rolling three-sigma rule it has to beat. Working name.
| detector | precision | recall | F1 | ROC AUC | average precision |
|---|---|---|---|---|---|
| rolling mean + 3 sigma | 0.692 | 0.208 | 0.32 | 0.586 | 0.666 |
| isolation forest | 0.719 | 0.531 | 0.611 | 0.622 | 0.725 |
| always flag (trivial) | 0.616 | 1.0 | 0.762 | - | - |
Held out by time, split at a gap in the archive. 211 labelled windows, positive rate 0.616. The trivial row is there because F1 on a mostly-anomalous period rewards flagging everything, and a table without it invites you to credit the model for the prevalence.
Nothing scored yet. POST a window of readings to /score.
Generated 2026-09-07T21:20:28+00:00. Recent scores are held in this process's memory and are lost on restart; there is no database and this is not a history.