Spent the day/week wondering why part of a network was transferring 100 times the planned data, wondering if data exfil, etc.

Nope, just misconfigured domain controllers. Still waiting on the geniuses on that team to figure something out.

If your DC uses GBs instead of MBs to replicate a mostly static directory, you might have a problem…