Hello, I see Frank Swift is on this list so it must be good.
Intrusion detection is something better thought of as being better proactive than reactive.
We can learn from each other how to prepare as well as how to react to Intrusion. I guess I'm still a student because everyday I learn something new about intruders and system administration or lack thereof. I echo David Wiseman's about wide-awake sysadmins. Unfortunately there are still some out there who either haven't a clue what's happening on the net, or perhaps figure the accident will always happen to someone else and they needn't wear seatbelts. I'm very interested in automated tools especially for Macs and Unix and their associated networks.