I mean, I get it. Actual network intrusion detection is pretty boring considering most things are getting hit a few hundred/thousand times a day.