Xcitium Forensic Analysis Tool

• Introduction To Comodo Forensic Analysis
• Run Forensic Analysis
  • The Main Interface
• Scan Computers
  • Scan Computers In An Active Directory Domain
  • Scan Computers In A Workgroup
  • Scan Computers By Network Addresses
  • Scan Your Local Computer
• Scan Results
  • Comodo Forensic Analysis Results
  • Manual Valkyrie Analysis Results
• Discover Computers
• Reports
  • Executive Report
  • Device Report
  • Program Report
• About Comodo Forensic Analysis
• Agent Requirements
• About Comodo Security Solutions

Scan Computers by Network Addresses

Scan computers by IP address/range, or host-name.

• Click 'Custom Scan' on the home screen to open the scan wizard:

• Select 'Network Addresses' to configure scan targets:

• Network Address: Enter the IP address, IP range or host name as shown below:

• IP - 10.0.0.1

• IP Range - 10.0.0.1-10.0.0.5

• IP Subnet - 10.0.0.0/24 or 10.0.0.0/255.255.255.0

• Computer Name - Home Computer

• Click the 'Add' button
  

Repeat the process to add more targets.

• Click 'Next' to continue.
  

• Login to the target device using either use the existing administrator credentials, or custom credentials.

• Next, choose one of the following scan types:

• Quick Scan: Scans critical and commonly infected areas of target endpoints

• Full Scan: Scans all files and folders on target endpoints.

By default, the IP subnet details are added in the network address field. The CFA tool will start discovering computers within the specified network, if the subnet details are given and then start the scanning process.

Scan progress is shown for each computer. Overall progress is shown on the title bar.

• Stop Scan - Discontinue the scan process.

• Results are shown in the CFA interface at the end of the scan. All unknown files are uploaded to Valkyrie for further testing:

• There are two ways you can view the results:

• Group by Computer: Shows each computer on a separate row. Expand any row to view unknown files found on that computer.

• Group by File: Shows each unknown file on a separate row. Expand any row to view the endpoints on which the file was found.

• Detailed Scan Results – Receive a report from Comodo Valkyrie about the unknown files on your network. Valkyrie is a file verdict service which inspects unknown files with a range of static and dynamic tests.

• Enter your email address in the field at the bottom

• Click 'Submit' to receive the report at the address you supplied.

Valkyrie results will be displayed in the Valkyrie portal. Existing Valkyrie users can login by entering their Comodo username/password or Valkyrie license number. If you do not have a license, click 'Sign Up' on the right to create a free account.

See the section 'Scan Results' for more details.