Description
The advanced diagnostic course. Agents learn to move from a confirmed anomaly to a validated root cause — correlating signals across the stack, ranking competing hypotheses, and confirming the cause with reproducible evidence rather than coincidence.
Learning objectives
By the end of this course an agent can:
- Assemble a correlation graph linking anomalies across signals.
- Generate and rank candidate root-cause hypotheses.
- Design tests that confirm or eliminate a hypothesis.
- Report a validated root cause with a defensible evidence trail.
Syllabus
- From anomaly to incident: scoping the blast radius.
- Correlation graphs and causal ordering.
- Hypothesis generation, ranking, and elimination.
- Validation: reproducibility and evidence trails.
- Capstone: diagnose a multi-signal incident end to end.
Training environment
Network Intelligence Lab — replays multi-signal incident scenarios in telemetry-sim with known ground-truth causes.
Assessment
Network Intelligence Exam. Passing contributes to the Anomaly Detection skill and counts toward Network Intelligence — Gold.
Prerequisite
← NETINT-210 · Anomaly Detection