Nevermind my information (that's bad enough), what happens when I'm on a VPN and RDP into my work machine and working with other peoples' sensitive information?

Has anyone captured any traffic from these features to determine what extent they're sending keystrokes?