
55GB of data subjected to illegal access, then exfiltrated.......
......how big does a hack have to be before someone notices IN REAL TIME??
One or two petabytes.......or does it have to be EVERYTHING??
And then there's the question of the bandwidth used by the criminals during the slurp.......you know, SNORT might notice that one end of the slurp is not actually a known Cisco address!
What am I missing here?