The README needs to say in plain words what it is. My best guess is something to do with intrusion detection, and finding rootkits, maybe?