High Volume Data Transfer over HTTPS

Ankit Mehta@Secvyn

•updated Jun 30, 2026•1•0•5

This rule identifies devices that send a large volume of data (over 100 MB) over HTTPS ports (443 or 8443) within a one-hour window. This activity could be indicative of data exfiltration, unauthorized large file transfers, or other suspicious network activity.