How would you design a system to perform real-time anomaly detection on streaming endpoint data at SentinelOne?
