How Anomaly Detection Actually Works in Security Operations

Anomaly detection in security operations isn't magic. Here's what the math actually does, where it works on auth and network data, and where it falls short.