Data Exfiltration Activity

Attackers often target valuable data to steal, such as sensitive customer data, financial information, or trade secrets. Data exfiltration is the transfer of valuable data to unauthorized users outside of the network. Data can be exfiltrated by employees with authorized access to critical assets, or by attackers who gain unauthorized access to critical assets through malware or an exploit. Large amounts of data are often transferred outside of the network over protocols such as HTTP, SSH, FTP, or SMTP. However, attackers are more frequently encrypting transferred data to hide their activity.