Intrusion Detection Systems (IDS) are a crucial component in cybersecurity frameworks, designed to monitor network traffic or system activities for malicious activities or security policy violations. These systems function as a vigilant watchdog, continually scanning for unusual patterns or behaviors that may signify a network intrusion. Once detected, the IDS typically issues an alert, and in some configurations, can take immediate action to neutralize the threat. There are various types of IDS, including Network-based IDS (NIDS) that scrutinize the inbound and outbound traffic on a network, and Host-based IDS (HIDS) that focus on individual devices like computers or servers. The primary goal is to provide an additional layer of security, effectively catching malevolent activities that may have bypassed other forms of security controls, thereby aiding organizations in the ongoing battle against cyber threats.