Abstract: A system and method for real-time detection of anomalies in a motor drive includes a controller receiving one or more signals corresponding to real-time operation of a controlled system. The controller samples the real-time signal during operation of the controlled system and maintains a moving window of the sampled data. A signature of the sampled data within the moving window is then generated. Each signature corresponds to operation of the controlled system within the period of time defined by the moving window. An identifier and a number of occurrences of each signature may be stored with the signature. An initial table of expected signatures may be generated, for example, by executing a training, or learning, period within the control system. The controller compares each real-time signature against the table of expected signatures to detect the occurrence of an anomaly.