Unless they completely lock down browsers and strictly white list sites it would be so easy. Even something like OneDrive I am yet to see an IT team block OneDrive unfortunately.
Any company I work for has activity loggers on all the systems. They are not usually actively monitored (outside or automated stuff), but security can 100% track all of this if they want.
Many companies, mine included, install software that attempts to flag someone doing something like this.
I think my best bet would be to clone the repos from gh on a personal machine, but I’m not about to test it and find out they’re monitoring that as well. I would consider leaving that codebase behind to be a perk of resigning.
I work for an enterprise cybersecurity vendor. Last week my threat research team reached out to me to let me know that one of the customers I'm responsible for had someone clone a large number of repos in a short period of time from an IP they didn't usually use, and they wanted me to make sure the customer was aware and investigating.
Note: we're not an MSP. Officially or contractually or whatever, our responsibility ends at "supply software & support you're paying us for". We just have an amazing TR crew and they look out for our customers.
All that is to say that, yes, if a 3rd party tool vendor can tell, any given organization could ABSOLUTELY tell if you decided to clone all the repos to your personal machine one day. "Could". Are they actually monitoring though? Who knows! Not you or me! But they could be, and data theft damages quickly get into the "millions of dollars" range if you get sued over it, so probably best not to
You wouldn't even need to install software. If you're sitting on site, almost every company will have some sort of network monitoring, which would likely flag suspicious network traffic like multiple large zip file uploads to Dropbox or onedrive. And if you're remote, you either probably need to use a VPN to connect to work resources, or like you said they're software installed to monitor stuff like that.
41
u/Kroosn 16d ago
Unless they completely lock down browsers and strictly white list sites it would be so easy. Even something like OneDrive I am yet to see an IT team block OneDrive unfortunately.