How can i track which program sends data over my network and can i see the contents of it?
If we have a AV software installed in a VM , can we see what it's sending from your pc when doing a scan?
With wireshark you can see all the incoming/out-coming traffic at your network. You can install wireshark at your vm.
It shows you a breakdown for every packet being exchanged from your network, you can see all the information of that packet including
protocol being used etc.
Once you've found a suspicious packet you can
right click it -> follow stream which will show you the entire exchange of packets between your computer and the target server.For every packet you can see its payload,which is the actual content of the packet.
The payload will be in HEX form and possibly encrypted which is a downside at tracking exactly what information is sent.