Although we are concerned with intrusion detection, it’s also important to include extrusion detection in your organization, as it will help pick up clues that malicious activity is in your organization by monitoring for suspicious outbound connections.