A device or software application that monitors a network for malicious activities or policy violations.