Detecting Exfiltration via Low-and-Slow Protocols

Identify subtle, long-term protocol anomalies used for secret data transfer.