1. An event anomaly analysis and prediction apparatus comprising: a processor; and a memory storing machine readable instructions that when executed by the processor cause the processor to: access at least one master directed graph that specifies known events and transitions between the known events; rank each of the known events, wherein the ranking of each of the known events is based on a probability of anomalousness assigned to each of the known events, and the probability of anomalousness assigned to a known event of the known events is determined relative to each of the other known events; cluster each of the ranked known events into a plurality of anomaly categories; determine, based on the plurality of anomaly categories, a plurality of rules to analyze new events; access data that is to be analyzed for an anomaly; determine, based on an application of the plurality of rules to the data, whether the data includes the anomaly; and in response to a determination that the data includes the anomaly, control a device associated with the data.