Enginsight Intrusion Detection System (IDS)

Enginsight Intrusion Detection System (IDS) logs capture intrusion detection events from host sensors, monitoring network and system activity for malicious behavior or policy violations :contentReference[oaicite:2]{index=2}. They include both signature-based alerts and anomaly-based detections, with details on rule identifiers, threat severity levels, source and destination IPs and ports, timestamps and underlying detection engine metadata for SIEM correlation :contentReference[oaicite:3]{index=3} :contentReference[oaicite:4]{index=4}. These logs are ingested into the SIEM to provide real-time visibility and historical forensic analysis of detected threats :contentReference[oaicite:5]{index=5} :contentReference[oaicite:6]{index=6} :contentReference[oaicite:7]{index=7} :contentReference[oaicite:8]{index=8}