Resolve unexpected SSH outbound connections by identifying rogue processes, auditing logs, and removing unauthorized keys.