Data Exfiltration

Data exfiltration↗ is the unauthorized transfer of data out of a compromised system or network, typically the final stage of an attack after an intruder has gained access and located valuable information to steal.

Attackers often try to disguise exfiltration as normal network traffic or spread it out over time to avoid detection. Monitoring for unusual outbound data volumes and restricting what can leave a network are key defenses against this stage of an attack.