Network data transmission auditing

A method for analyzing network transmissions, the method comprising:

• under control of a virtual network comprising a substrate network associated with an overlay network, the substrate network comprising a plurality of physical computing nodes, the overlay network at least partially simulated by the substrate network,
• configuring the virtual network based at least in part on a data loss prevention (DLP) policy of a user of the virtual network, wherein the configuring comprises associating the DLP policy with at least one of the substrate network;
• analyzing a network flow transmitted via the virtual network to detect a subset of the network flow that matches one or more criteria specified by the DLP policy;
• and
• in response to detection of the match, performing at least one of the following:
• storing at least a portion of a data in a snapshot;
• or
• storing events associated with the data in a compliance log;
• or
• preventing further transmission of at least a portion of the data;
• and
• analyzing at least one of the snapshot or the compliance log for additional matches to the DLP policy.

A non-transitory computer-readable storage medium having computer-executable instructions stored thereon for analyzing network transmissions, the computer-readable storage medium comprising computer executable instructions for:

• analyzing a network flow transmitted via a virtual network, a virtual network comprising a substrate network associated with an overlay network, the substrate network comprising a plurality of physical computing nodes, the overlay network at least partially simulated by the substrate network,
• detecting a subset of the network flow that matches one or more criteria specified by a data loss prevention (DLP) policy;
• and
• in response to detection of the match, performing at least one of the following:
• storing at least a portion of a data in a snapshot;
• or
• storing events associated with the data in a compliance log;
• or
• preventing further transmission of at least a portion of the data;
• and
• analyzing at least one of the snapshot or the compliance log for additional matches to the DLP policy.