1. A method, comprising: receiving, at a node, indicia of a fault state in one or more components of a computer network; identifying, based on the indicia, a network dependency group comprising a plurality of network components hierarchically associated with the one or more components; receiving, from a database, a time series of performance data values corresponding to the network dependency group, wherein the time series comprises performance data values from before and after onset of the fault state; identifying altered performance data values in the time series comprising values which differ before and after onset of the fault state; and determining a root cause of the fault state by identifying one or more particular components within the network dependency group associated with the altered performance data values.