Data Manipulation
Attackers routinely target sensitive company and customer data once they gain access to a network. In order to exfiltrate the targeted data, attackers may create large compressed files, move files to a central location, or encrypt files to hold for ransom. User and administrators should pay attention to high disk usage, major file changes, unrecognized files, or unusual file extensions.
Slow Network Connections
Malware outbreaks and cyber-attacks frequently result in network traffic spikes produced by data being exfiltrated. This activity can cause legitimate connections to slow down. Be especially suspicious of network spikes outside normal business hours. Severe network slowdown should be investigated to identify if the root cause is a malfunction or a cyber-attack.
