An input dataset is sorted into a first version of data and a second version of data. The first version of data is associated with a first period of time and the second version of data is associated with a second period of time. The second period of time is a shorter period of time than the first period of time. A first set of one or more machine learning models is generated based on the first version of data. A second set of one or more machine learning models is generated based on the second version of data. The first set of one or more machine learning models and the second set of one or more machine learning models are combined to generate an ensemble model. A prediction based on the ensemble model is outputted. The prediction indicates abnormal behavior associated with the input dataset.