What abnormalities will you look for? Ideas
Pdf - Netdiscover is use kali linux tools unlikely is fitted with siems and incident team