Back to directory

Anomaly Detection Tutorials

A sequence of runnable notebooks that teaches time-series anomaly detection from simple z-scores up to modern deep learning models, with honest evaluation and real-world case studies.

Anomaly Detection Tutorials

Anomaly Detection Tutorials is a curriculum of notebooks progressing from methods you can compute by hand to deep models used in production: starting from z-scores, moving statistics, and STL residuals, through classic machine learning methods such as Isolation Forest, One-Class SVM, and LOF, autoencoders and their adversarially trained and probabilistic variants, the training-free Matrix Profile method, forecasting-based detection, a GAN-based detector, graph neural networks, transformers, self-supervised representations, streaming detection with the Robust Random Cut Forest, and zero-shot detection with foundation models, ending with a chapter on evaluating detectors correctly and a planned case study on detecting silent regressions in LLM telemetry.

Every notebook runs top to bottom on CPU in minutes, is seeded for reproducibility, pairs each method with its failure modes rather than only its successes, measures results against ground-truth labels where they exist and says clearly where they do not, and uses one consistent, colorblind-safe visual style. Notebooks can be run locally after installing with uv, or opened directly in Google Colab.

More in Tutorials

See all 478
  • BootLife

    github.com

    Conway's Game of Life implemented to run directly from a 512-byte x86 boot sector in assembly, using VGA memory itself as the simulation grid.

  • A technical blog post deriving the Y combinator as a composition of combinator birds in an array language, and examining how eager evaluation changes fixed-point recursion compared with the usual lazy telling.

  • System Design Atlas

    atlas-sysdes.vercel.app

    A free reference of worked system design problems with interactive architecture diagrams, covering ranked designs such as a feed, a chat app, a URL shortener, and a rate limiter, plus pages on the technologies behind them.