| 6.1.6. Observed Activity |
| 6.1.6.2. Observed Network Activity |
 | 6.1.6.2.1. Significantly increased network usage |
| 6.1.6.2.2. Port scans and failed connection attempts targeted at the |
| 6.1.6.2.3. Network connections between the host and unknown remote systems |
| 6.1.6.1. Observed Host Activity |