Such as, an IDS might count on to detect a trojan on port 12345. If an attacker had reconfigured it to implement another port, the IDS might not be capable of detect the presence on the trojan. Lowered false positives - correlating intrusion alerts with data from other programs enables https://fredm173hii9.wikijm.com/user