A SOC analyst is reviewing traffic captured at the network perimeter to hunt for command-and-control activity. She notices that over 80% of outbound sessions are TLS-encrypted, and her intrusion detection sensor can no longer inspect the payloads of these sessions for malicious signatures. Which data visibility challenge is she primarily facing?