An IDS, or Intrusion Detection System, is a software or device which monitors and identifies malicious network activity. It serves to detect unauthorized or suspicious actions happening over a network, alerting administrators to potential threats. Unlike forensic tools or endpoint protection software, which have distinct roles in analyzing events after they have occurred or preventing infections at endpoints, an IDS is specifically designed to identify ongoing malicious activities in real-time.