Vote for serverM Host Based Intrusion Detection System

port80’s serverM intrusion detection system monitors your Windows servers and desktops for symptoms of unauthorised computer access, and computer misuse.
serverM uses a rules-based language that enables you to translate your organisation's security policy into a monitoring and intrusion prevention system.