Threat Hunting -- Exfiltration

Data Staging & Exfiltration Hunt

Before data leaves your network, attackers and malicious insiders stage it — collecting, compressing, and preparing files for transfer. This hunt targets the staging and exfiltration phase using patterns that are detectable before the data is gone.