1. A method comprising: capturing packets being transmitted over a network; assembling an object from the captured packets; assigning a cryptographic status to the object by determining whether the captured object is encrypted; and determining whether the object violated a cryptographic policy using the assigned cryptographic status of the object, wherein assigning a cryptographic status to the captured object comprises performing a statistical analysis on bytes in the captured object, and wherein the statistical analysis comprises calculating an index of coincidence for the bytes in the captured object.