Architecting a real-time streaming anomaly detection system.

Requires a scalable message bus (Kafka), stream processing (Flink/Spark), and low-latency storage[cite: 1].

Features must be calculated in-memory (sliding windows) and passed to lightweight models like Isolation Forest or pre-trained Neural Nets for sub-second inference[cite: 1].