I don't generally talk in public forum about the specific products I use, but if you want to play with an IDS at home: snort or suricata would be good toys to p

I don't generally talk in public forum about the specific products I use, but if you want to play with an IDS at home: snort or suricata would be good toys to play with. In the enterprise, there are so many IDS/IDP and SIEM products out there, and they're all different. Some are great for mixed environments of Windows, UNIX and infrastructure. Others are better for specific platforms. Your best bet is to get demo licenses and start playing with them instead of relying on word-of-mouth or shiny pamphlets from marketing-types.