1. A method comprising: capturing packets being transmitted over a network; assembling an object from the captured packets; assigning a cryptographic status to the object by determining whether the captured object is encrypted; and determining whether the object violated a cryptographic policy using the assigned cryptographic status of the object.