Add rolling histogram and factor out anomaly detection

Yay for table-driven tests! I think it would also be good to test different values of `multiplier` and `sentinel`.