High value data exfiltration from IIS servers