US Patent 11663061 Anomalous behavior detection

A training dataset is used to train an unsupervised machine learning trained model. Corresponding gradient values are determined for a plurality of entries included in the training dataset using the trained unsupervised machine learning model. A first subset of the training dataset is selected based on the determined corresponding gradient values and a first threshold value selected from a set of threshold values. A labeled version of the selected first subset is used to train a first supervised machine learning model to detect one or more anomalies.