Large HTTP POST Exfiltration - Multipart or Chunked Upload Over 5MB

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•1

Detects large HTTP POST requests (over 5MB) directed at external hosts that utilize multipart or chunked encoding, which are commonly used to obfuscate or stream large volumes of data during an exfiltration event.