It takes a snapshot of existing system files and matches it to the previous snapshot .
A HIDS monitors the inbound and outbound packets from the device only and will alert the user or administrator if suspicious activity is detected .
HIDS takes a snapshot of existing system files and matches it to the previous snapshot .
A HIDS monitors the inbound and outbound packets from the device only and will alert the user or administrator if suspicious activity is detected .