Abstract: A computer system can automatically generate a directed graph interface for use in detecting and mitigating anomalies in entity interactions. For example, the system can receive interaction data describing a set of interactions at two entities. The system can then generate a directed network graph based on the interaction data. To do so, the system can identify pairs of interactions associated with the two entities in the set of interactions. The system can classify the pairs of interactions as outbound and/or inbound interaction pairs. The system can then generate one or more directed links in the directed network graph to represent the outbound and/or inbound interaction pairs. The system can further determine a characteristic of the outbound and/or inbound interaction pairs, automatically detect an anomaly that may be suggestive of malicious activity by one or both entities based on the characteristic, and output an indicator of the detected anomaly.