The current Network Bandwidth threshold provides little value.

It would be better if there was a Network Interface (Utilization) Alert. Knowing if a device is downloading or uploading large amounts of data could be a red flag and worth investigating.

Create a customize alert for monitoring the Network Interface on a device to trigger an alert based on the total amount of data being sent (upload) or received (download) during a specific duration of time.