A simple way of detecting multithreaded exfiltration in Zeek. - View it on GitHub