Anomaly Detection Response Runbook
A step-by-step runbook for operators and analysts to validate anomalies, contain potential issues, and convert alerts into investigations or false alarm closure.
Steps: triage (confirm signal and trend), quick containment (if safety/quality risk), evidence collection checklist, initial classification (true positive, sensor fault, configuration), assign owner, schedule RCA if true positive, update model labels and tuning if false positive. Include escalation matrix and sample log entries.
Discussion
Comments and conversation will live here.