Data exfiltration detection

Assess possible data movement using destinations, protocols, volume, files, and user context. Identify evidence gaps and recommend low-risk validation and containment actions.

sec-link d2ed834 638 B Updated

File contents

Data exfiltration detection

Assess possible data movement using destinations, protocols, volume, files, and user context. Identify evidence gaps and recommend low-risk validation and containment actions.

Output requirements:

  • Cite observed evidence from the ticket.
  • Mark unknown values as unavailable.
  • Return structured JSON fields when requested.
  • Do not change ticket status or execute commands.

sec-link/argus-agentic-soc-platform/tree/main/backend/skills/data-exfiltration-detection commit d2ed8347e1

Frequently asked questions

npx skillmds@latest add sec-link/data-exfiltration-detection