https://www.netfort.com/languardian/s... In this video we look at how you can monitor traffic at the network edge to check for suspicious activity.
The main thing to watch out for initially is any unusual inbound activity. Applications such as RDP are often targeted.