DNS Data Exfiltration detected

We have our DNS servers in AWS cloud. During penetration testing DNS data ex-filtration was detected in our environment. Can MSATA detect, prevent and report this? Currently we dont have SIEM enabled...