[deathhand]

Besides the enterprise grade tools I've been using Glasswire. It's like LittleSnitch for the Mac.

They aren't a huge security company so I don't know how easy it is to escape detection however their verbose reporting of application version changes, protocol usage, destination lists, and integration with Virus total gives me some sort of confidence.