A system that monitors network or system activity and generates alerts when suspicious behavior is detected.