Computer-implemented systems and methods for analyzing activities associated with accesses of a computer network. A computer-implemented method can be configured to receive data related to the activities associated with the accesses of a computer network. The network activities data are segmented into a plurality of network activities segments. For each of the network activities segments, an anomaly detection predictive model is generated. The generated predictive models are for use in analyzing the activities associated with the computer network.