High Volume of Traffic from High or Critical Host Observed

Description

Alerts when a host of high or critical severity generates a high volume of outbound traffic. This may indicate that the host has been compromised.