We are seeing anomalous outbound traffic from a database server in our PA data center at QVC. Walk me through exactly how you would investigate this.