Reviews operational data for unusual patterns, suspicious changes, and repeated anomalies before they spread.