What are the limitations of an intrusion detection system?
An intrusion detection system cannot help you to solve or fix all security incidents. It cannot tell you exactly who and how the attack occurred, nor can it tell you the intention of the attacker. It can only provide information about the origin of the attack and the IP address of the originating attack. You will need to analyse all relevant logs in order to identify the real attacker.
