Such as, an IDS may perhaps expect to detect a trojan on port 12345. If an attacker had reconfigured it to make use of a special port, the IDS might not be capable of detect the presence in the trojan. Decreased Fake positives - correlating intrusion alerts with details from https://softclean.xyz/