1. A computing system, comprising: a processor; and memory storing instructions executable by the processor, wherein the instructions, when executed, configure the computing system to: receive an unstructured event record with event information indicative of an unstructured event, the unstructured event comprising an event other than a structured event that has a predefined event type and is configured to occur according to a predefined workflow associated with the computing system; access an event type identifier model; identify an event type corresponding to the unstructured event based on the event information and the event type identifier model; generate an event type label, indicative of the event type, corresponding to the unstructured event record; access a process model and a set of logged computing system processes to identify a process; based on the unstructured event record, determine that the unstructured event corresponds to the identified process; identify a workflow based on the identified process and the identified event type corresponding to the unstructured event record; identify an anomaly in an activity pattern based on the identified process; modify the workflow based on the identified anomaly; generate a representation of a user interface display that includes the modified workflow and a user input mechanism; and based on an indication of user actuation of the user input mechanism, perform an action with respect to the modified workflow.