1. A method for detecting one or more anomalous devices, the method comprising: for each of a plurality of devices, receiving semi-structured data from the device; for each pair of devices of the plurality of devices, determining a similarity measurement between semi-structured data from a first device of the pair of devices and semi-structured data from a second device of the pair of devices; identifying one or more anomalous devices; and performing one or more remedial actions for the one or more identified anomalous devices.