Firewall: large outbound transfer to external address

Assign this alert to yourself to see the evidence and start investigating.