Hmm worth exploring!

Egress monitoring sees what a process attempts, while the intent behind it stays hidden, and that gap is where the damage lives. A model that wants to ship data out does not need an HTTP body. It can put the payload in a DNS query, a domain label, or the timing of a connection, and at the socket all...