Question for people who work in IT: What are some things employees aren’t aware of that Employers are capable of installing on a work computer?

I was thinking about leaving but read on reddit that people should always save their work in case of a sudden layoff or they get locked out for whatever reason, IT: can employers tell if I copy a file onto an eternal USB? Are there other things I should be aware of? We use a vpn/ external harddrive