Unsupervised anomaly detection (Isolation Forest, One-Class SVM, Autoencoder) Red team simulation to inject malicious behaviors Graph-based analysis (NetworkX, PyVis) for entity relationships and ...