Software that looks for suspicious activity and alerts administrators.
Sources:
NISTIR 7711
under Intrusion Detection System