Data exfil detection is a game of whack-a-mole. There is an endless variation of ways I can get data of your machine or out of your network.
Your time is much better spend detecting or preventing compromise.
Your time is much better spend detecting or preventing compromise.
And yes compromise detection is of course the priority. But it's not just one or the other. We do everything at the same time. The swiss cheese model and all that.