Which type of data is used to monitor and detect anomalies within the organization's network?

Statistical data involves collecting metrics over time, such as bandwidth utilization, connection counts, or packet rates, to establish baselines of normal network behavior. Anomalies are detected when current measurements deviate significantly from these established statistical norms, indicating potential security incidents or performance issues.

Metadata provides descriptive information about data, but by itself, it's not the primary data type for anomaly detection without statistical analysis applied to it.

Transaction data refers to records of completed events, which can be analyzed, but it's not the general type of data for *network* anomaly detection in the same way statistical traffic flows are.

Alert data is the *output* of a detection system when an anomaly or threat is identified, not the input data used for monitoring and detection itself.