7. Strange traffic patterns on the network.
Seeing a file transfer to a website in a country where you have no business? Yes, that is unusual. What should you do if you see any unusual transactions? Kill the network connection and start an inquiry into the occurrence.
Fewer organizations would be compromised if more companies were aware of their legitimate network traffic patterns, hence there are tools to assist you. You can either look into free, open-source alternatives or go for a reputable commercial choice that has already done the legwork for you.