Your files will not go over the network, everything is computed locally in your browser.
The log entries will be processed to identify the footprint of an attack.
Expected processing speed 2.7MB/sec for Salesforce provided files and 17MB/sec for standard Eventlog Files.