Walk us through your investigation process if you receive an alert for anomalous outbound traffic from a critical database server.