Five Malicious Insider Threat Indicators and How to Mitigate the Risk Unusual logins. ... Use or repeated attempted use of unauthorized applications. ... An increase in escalated privileges. ... Excessive downloading of data. ... Unusual employee behavior.