Two distributions
<l2st>
One known (=normal)
One unknown (=anomalies)
</l2st>
Seperate them
Problem: few anomalies