consists of procedures and systems that are created and operated to detect system intrusions
enables the collection of information about intrusion techniques that can be used to strengthen the intrusion prevention facilty
Nothing anywhere near 'em.