lsass process creating lot of network upload traffic

[RoDiek]

Hey guys, my lsass process is creating a whole lot of network upload traffic regarding LDAP queries and I am not sure why. They are going to different IPs and ranges but all in US. Do you have an idea why? Thanks guys! Robin Dieker O365 CSS Premier Support

[#2]

PCAP file attached: https://arvmuediek040ent-my.sharepoint.com/personal/robin_dieker_msft_email/_layouts/15/guestaccess....