Yes, an IDPS can help identify insider threats because it searches for unforeseen modifications like deletion, overwriting, and access to specific ports, which is very effective against insider threats. System administrators receive alerts for questionable activity.