Intrusion detection system, also referred to as IDS, is a software application or device or service that constantly monitors systems or networks for policy violations or any malicious activity. If any threat is detected, it is usually reported to an administrator. In some cases, the threat is collected using a SIEM system. Intrusion detection helps in evaluating cyber-attacks processes and technology. As threats are evolving, organizations are being forced to constantly adjust their detection and protection strategy.