Kahlo, a cybersecurity analyst, has received an alert from her IDS about an attempted intrusion into one of the servers she is responsible for. Once she logs in$,$ she finds a legitimate service that runs very rarely has triggered an algorithm to identify an attempted data breach. Which of the following terms best describes what caused the IDS to notify her?