A network device communicates network traffic in one or more network flows via a plurality of ports. Each port is connected to a corresponding computing device. The network device collects flow-based network data associated with each corresponding computing device. The network device supplies electrical power to the corresponding computing devices via one or more of the ports, and collects power data associated with each corresponding computing device based on the electrical power supplied to each of the ports. The network device combines the flow-based network data for each corresponding computing device and the power data for each corresponding computer device to generate combined data associated with each corresponding computing device. The network device then exports the combined data for the corresponding computing devices to a security server, which detects anomalous behavior in the computing devices.