Intrusion detection system is considered a second line of defense after intrusion prevention system. Finding normal patterns help to detect abnormal behaviors. Provide an example of normal patterns that help you to identify abnormal behaviors (e.g. daily work routine, school activities, community activities, etc.) and discuss how you establish your normal baseline and how this baseline will help you to identify anomalies.

EXPLAIN IN DETAIL