# What does a network sensor see when a laptop comes back to the office after a trip?

Everything the laptop does once it is on a monitored segment, which is exactly when a compromise picked up on the road becomes visible. Malware installed in a hotel or through a fake update usually calls home at regular intervals, looks for other hosts or reaches for file shares and admin services. A sensor on a SPAN or TAP port sees those connections from the first minute, and NetSenX flags beaconing, scanning, lateral movement and unusual outbound volume on every plan. What it does not see is what happened during the trip: traffic on the hotel network never crossed yours, unless the laptop runs the NetSenX agent, which watches its connections wherever it is. A sensible routine after travel to high-risk destinations: let endpoint protection run a full scan, apply pending updates, and change passwords if the device was out of your sight, for example at a border check.

FAQ: [Remote work and exposed services](https://netsenx.com/en/faq/remote) · https://netsenx.com/en/faq/what-does-a-sensor-see-when-a-laptop-returns-from-a-trip

## Read next

- https://netsenx.com/en/is-someone-inside-your-network
- https://netsenx.com/en/encrypted-traffic-analysis

## Related questions

- [Is an employee's home router a risk to the company?](https://netsenx.com/en/faq/is-a-home-office-router-a-risk-to-the-company)
- [Is public Wi-Fi safe for a work laptop?](https://netsenx.com/en/faq/is-public-wifi-safe-for-a-work-laptop)
- [Should a work laptop be used for personal browsing at home?](https://netsenx.com/en/faq/should-a-work-laptop-be-used-for-personal-browsing)
- [Can staff use their personal devices for work?](https://netsenx.com/en/faq/can-staff-use-personal-devices-for-work)
- [What should we do when a work laptop is lost or stolen?](https://netsenx.com/en/faq/what-to-do-when-a-work-laptop-is-lost-or-stolen)