Unusual Outbound Network Traffic Anomalies in Privileged User Account Activity Geographical Irregularities Log-In Red Flags Increases in Database Read Volume HTML Response Sizes Large Numbers of Requests for the Same File Mismatched Port-Application Traffic Suspicious Registry or System File Changes Unusual DNS Requests Unexpected Patching of Systems Mobile Device Profile Changes Bundles of Data in the Wrong Place Web Traffic with Unhuman Behavior Signs of DDoS Activity