Managed Sentinel – Alert 044

Alert IDMS-A044
Alert NameHigh bandwidth usage with streaming data
DescriptionThis alert is triggered for high bandwidth usage as a result of video streaming.
Severity LevelInformational
Threat IndicatorImproper Usage
MITRE ATT&CK TacticsExfiltration
Log sourcesFirewalls
False PositiveSanctioned Cloud applications
RecommendationsValidate if traffic is compliant with organization security policies. If not, apply firewall rules to block traffic to specific file streaming ports or applications.