An user can boot a system form bootable pen drive or bootable usb hard drive through third party backup and restore software and copy all data from system to usb hard drive.
How can protect it?
I have already endpoint security software but its working only after boot.