Large HTTP POST Possible Data Exfiltration Over 10MB

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•2

This rule detects large HTTP POST requests (greater than 10MB) originating from the internal network to external destinations, which may indicate bulk data exfiltration.