Abstract: A system, method and computer-readable medium for controlling writing of files in endpoint devices in a network are provided. In the system, a request to write a file at an endpoint of a network is intercepted and compared to predetermined criteria. If the file write request does not match any of the predetermined criteria the file write request is allowed to complete. If the file write request matches any of the predetermined criteria, a copy of the file is created and transmitted to a third party device, and at least temporarily the file write request is prevented from completing.