An anomaly is something that deviates from what is standard, normal, or expected. Network behavior anomaly detection is defined as the process of monitoring enterprise networks to detect abnormal behavior. Once an anomaly is spotted, network behavior anomaly detection either initiates an automated response or notifies security teams.