Multiple Outgoing Connections

Description

Triggered when the number of outgoing connections is greater than the user's historical baseline or the enterprise average.