What are indicators of attack?
large numbers of requests for the same file
multiple tog ins from different regions
swells in database read volume
suspicious registry or system file changes
Submit