An ongoing activity that examines either the system or the users, such as intrusion detection, is:
Auditing
Monitoring
Accounting
Eavesdropping