Do you still intend to share the IDS alerts as stated in the original post?That would also be very valuable. Thanks again for sharing the log data.
/Tomas