The process-centric taxonomy in this paper is one of the most structured frameworks I’ve seen for anomaly detection methods.
It breaks down approaches into distance-based, density-based, and prediction-based categories.
In practice (been doing time series analysis professionally for 8+ years), I’ve found that prediction-based methods (e.g., reconstruction errors in autoencoders) are fantastic for semi-supervised use cases but fall short for streaming data.