Skip to content

Glossary: Logs and Data Sources for Investigations

IDS (intrusion detection system)

Also written: IDS, network IDS, IDS alert

A tool that watches network traffic and raises an alert when the traffic matches a rule. Suricata, an IDS, alerted on the upload from the shop server to the attacker.

Where the book teaches it

Related terms

IPS (intrusion prevention system)Suricatasid (signature ID)Alert