What can network monitoring see when copied files are uploaded later?
The upload itself, if it leaves from a monitored device or segment: the device, the destination, the volume and the time, but not the files. If someone copies data to a USB stick at the office and uploads it from home, the office network never sees the upload. If the upload happens from a company laptop running the NetSenX agent, or from a computer on a monitored segment, NetSenX compares that outbound traffic with the device's own normal pattern on every plan and raises an alert when it is unusual, for example several gigabytes to a personal cloud storage service at night. The content stays unread, because NetSenX never decrypts traffic. To find out what was uploaded, you need the logs of the cloud service or endpoint tools, used within employment and data protection law.
General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.
Read next
Related questions
- Can we limit who sees security alerts about sensitive departments?
- Does NetSenX log who looked at or changed an alert?
- Does NetSenX support two-factor authentication for every user?
- What should employees be told about network security monitoring?
- Can HR find out from NetSenX which employee used an AI tool?