Monitor outbound traffic

Organizations should monitor outbound traffic from their web applications for any unusual or suspicious activity, such as large data transfers or connections to unfamiliar IP addresses.

Applies to

T0156 Exfiltration over webhooks

References

None listed.