How to Investigate a Sudden Increase in Outbound Network Traffic

A traffic spike may come from a backup, update, data transfer, misconfiguration, or unauthorized activity.

Checks to make

Identify source hosts, destination categories, protocol, and timing; correlate with scheduled jobs and change records; and inspect endpoint and network logs. Preserve flow data and assess data sensitivity before blocking traffic that may support critical services.

When to get help

Security operations can correlate network traffic with endpoint and change evidence. Informatix Systems can assess the symptoms, evidence, and next steps. Contact Informatix Systems to discuss this issue.