[MadsRC]

Data exfil detection is a game of whack-a-mole. There is an endless variation of ways I can get data of your machine or out of your network.

Your time is much better spend detecting or preventing compromise.

[wkat4242]

Yes, but for a company our size, to have something notable exfiltrated you are usually speaking about large volumes as well, which are easier to detect.

And yes compromise detection is of course the priority. But it's not just one or the other. We do everything at the same time. The swiss cheese model and all that.

[recursive]

Whatever your company size is, there are many other company sizes that exist.