The right level of complexity is the minimum needed to get the job done, and if your existing anomaly detector isn't cutting it...