Anomaly detector: implemented F1 analysis