nearly finished anomaly detection