Insider threats are some of the most overlooked events in the modern data center. Insiders, who are considered trusted, are often overlooked as the source of data exfiltration whether it be because of a mal-configuration or intentional. Being able to identify these actions is imperative but, can also be tricky. We will investigate how to identify these insider threats.