might be miss understanding you but either a host intrusion detection system or a network intrusion system comes to mind depending on how much you whant to log and what.