"Doing so, every process, file or other resource used by the system which is not recorded in the knowledge base is considered to be an anomaly." . . . . .