IDS

An IDS monitors network traffic or host activity and raises alerts when it sees signs of an attack. It observes and reports but does not block, leaving the response to analysts or other tools. It matters as one of the oldest and most fundamental detection technologies, and its alerts are a staple of SOC triage queues.