Everything patio11 said, but with an addendum: If you're trying to evade a behavioral Intrusion Detection System while exfiltrating the data, sending a small t

Everything patio11 said, but with an addendum: If you're trying to evade a behavioral Intrusion Detection System while exfiltrating the data, sending a small trickle over a long period of time is less obvious than sending 2 TB overnight and increases your odds of success.