I always have great success doing anomaly detection with basic standard deviation in some SQL queries...