Xcitium Forensic Analysis Tool

• Introduction To Comodo Forensic Analysis
• Run Forensic Analysis
  • The Main Interface
• Scan Computers
  • Scan Computers In An Active Directory Domain
  • Scan Computers In A Workgroup
  • Scan Computers By Network Addresses
  • Scan Your Local Computer
• Scan Results
  • Comodo Forensic Analysis Results
  • Manual Valkyrie Analysis Results
• Discover Computers
• Reports
  • Executive Report
  • Device Report
  • Program Report
• About Comodo Forensic Analysis
• Agent Requirements
• About Comodo Security Solutions

The Main Interface

The main interface of the tool allows you to configure and run scans, view results and generate risk reports.

Main Functional Areas

• Title Bar - Displays the scanning progress. You can also minimize, maximize and close the application by using the controls at the far right.

• Menu Bar - Contains the controls for using the application.

• Options - Displays the port numbers that CFA uses to communicate with our file lookup service (FLS). FLS is used to deliver real-time verdicts on the trust status of unknown files. Admins should leave these ports at the default.

• Create Reports - Generate a detailed report of the scan results. See 'Reports' for more details.

• Previous Scans - Shows your most recent scans
  

• Help - The 'About' menu entry shows product and version information. See About Comodo Forensic Analysis for more details. The 'Agent Requirements' menu entry contains troubleshooting advice if you experience problems connecting to your target computer.

• Search - Allows administrators to search for listed endpoints by name.

• Main Display Area - Displays details of scanned endpoints and the results from Valkyrie. See the sections 'Scan Computers' and 'Scan Results' for more details. Also contains the controls for scanning. Also contains controls for launching local and custom scans:
  

• Scan Now - Scan endpoints on your local network to identify unknown files. See the section 'Scan Computers' for more details.

• New Custom Scan - Scan endpoints in a Workgroup, Active Directory, or Network Addresses. You can also scan your local computer. See the section 'Scan Computers' for more details.

• Detailed Scan Results - Opens Valkyrie results. Valkyrie is Comodo's file-verdict system, which comprehensively tests files to see if they exhibit malicious behaviour.

• Start/Restart Discovery – Identify the number of machines available in the given network. See Discover Computers for more details. See Discover Computers for more details.

• Email Form Area – Enter your email address after the Valkyrie analysis is complete to receive a detailed scan report.