1. A method, comprising: processing first data accessed from a validated source; processing second data accessed from an unvalidated source, wherein the validated source is independent of the unvalidated source; comparing the processed first data with the processed second data for an adjustable interval of time to determine a threat detection value; and when the threat detection value meets a configurable threat detection threshold, generating a threat alert message, wherein the threat alert message identifies an anomaly in either the validated source or the unvalidated source.