Question: is bro an ids or ips?
Answer: Zeek (formerly known as Bro) is an intrusion detection system that works differently from other systems because of its focus on network analysis. While rules-based engines are designed to detect an exception, Zeek looks for specific threats and trigger alerts.