Software that looks for suspicious activity and alerts administrators.
Source(s):
NISTIR 7711
under Intrusion Detection System