Data processing method and related device

The embodiment of the invention discloses a data processing method and a related device, aiming at a network environment comprising a plurality of terminal devices, the plurality of terminal devices do not respectively load rule libraries for detecting network threats, so that cooperative work for anomaly detection between the terminal devices and anomaly detection devices is realized, and the network threat detection efficiency is improved. The to-be-detected data is extracted based on the computing capabilities of the plurality of terminal devices, so that the data volume reported to the anomaly detection device is reduced, the receiving and processing pressure of the anomaly detection device is reduced, the time delay of obtaining the anomaly detection result is shortened, the first terminal device can obtain the anomaly detection result in real time, and the user experience is improved. And great influence of abnormal conditions on the first terminal equipment is avoided. Moreover, the anomaly detection o