Not LEM, but could easily have been used in that way:
A few jobs ago, I was a contractor for a large federal agency where we installed SolarWinds for one of their departments. They had a pretty standard setup that included, among other things, UDT and NTA.
Being a federal agency, there were certain rules for usage and no expectation of privacy for the users. We were also plagued with a small pipe for traffic... Lo and behold, we quickly realized that we could pinpoint the youtubers and netflixers and etc etc. Those weekly reports at the all-managers meetings were fun to create.