It is a totally free HIDS that focuses on rootkit detection and file signature comparisons for Unix and Unix-like operating devices, so it will eventually Focus on Mac OS and Linux as well. Suricata is probably the principle choice to Snort. There is an important advantage that Suricata has above