Detection Engineering
Exfiltration Channels and Low-and-Slow Transfer
Reason about exfiltration across network, SaaS, cloud, email, removable media, and covert channels by separating transfer-shaped evidence from proof of content and intent.