Cytomic Encryption lists

Accessing the lists

You can access the lists in two ways:

  • From the top menu, select Status. From the side menu, select Cytomic Encryption. Click the relevant widget.

    Or,

  • From the top menu, select Status. From the side menu, click the Add link. A window opens that shows the available lists.

  • From the Data protection section, select a list to view the associated template. Edit it and click Save. The list is added to the side menu.

Required permissions

You do not need additional permissions to access the Encryption status list.

Encryption status

This list shows all computers on the network managed by Advanced EDR and compatible with Cytomic Encryption. It includes filters related to the module to monitor the encryption status of the network.

Field Comment Values

Computer

Name of the computer compatible with the encryption technology.

Character string

Computer status

Agent reinstallation:

  • Reinstalling the agent.

  • Agent reinstallation error

Protection reinstallation:

  • Reinstalling the protection.

  • Protection reinstallation error.

  • Pending restart.

Computer isolation status:

  • Computer in the process of being isolated.

  • Isolated computer.

  • Computer in the process of stopping being isolated.

“RDP attack containment” mode:

  • Computer in “RDP attack containment” mode.

  • Ending "RDP attack containment" mode.

Icon

Group

Folder within the Advanced EDR folder tree the computer belongs to.

Character string

Operating system

Operating system and version installed on the workstation or server.

Character string

Hard disk encryption

Cytomic Encryption module status.

  • No information

  • Enabled

  • Disabled

  • Error

  • Install error

  • No license

Disk status

Encryption status of the computer internal storage media.

  • Unknown

  • Unencrypted disks

  • Encrypted disks

  • Encrypting

  • Decrypting

  • Encrypted by the user

  • Encrypted by the user (partially)

  • Encrypted (partially)

Authentication method

Authentication method selected to encrypt disks.

  • All

  • Unknown

  • Security processor (TPM)

  • Security processor (TPM) + Password

  • Password

  • USB drive

  • None

Last connection

Date when the agent last connected to the Cytomic cloud.

Date

Fields in the Encryption Status list

Fields displayed in the exported file
Field Comment Values

Client

Customer account the service belongs to.

Character string

Computer type

Type of device.

  • Workstation

  • Laptop

  • Server

Computer

Name of the computer compatible with the encryption technology.

Character string

IP address

The computer primary IP address.

Character string

Domain

Windows domain the computer belongs to.

Character string

Description

Description assigned to the computer.

Character string

Group

Folder within the Advanced EDR folder tree the computer belongs to.

Character string

Agent version

Internal version of the Cytomic agent module.

Character string

Installation date

Date when the Advanced EDR software was successfully installed on the computer.

Date

Last connection date

 

Date

Platform

Operating system installed on the computer.

Character string

Operating system

Operating system installed on the computer, internal version, and patch status.

Character string

Updated protection

Indicates whether or not the installed protection module is updated to the latest version released.

Boolean

Protection version

Internal version of the protection module.

Character string

Updated knowledge

Indicates whether or not the signature file found on the computer is the latest version.

Boolean

Last update

Date when the signature file was last updated.

Date

Hard disk encryption

Cytomic Encryption module status.

  • No information

  • Enabled

  • Disabled

  • Error

  • Install error

  • No license

Disk status

Encryption status of the computer internal storage media.

  • Unknown

  • Unencrypted disks

  • Encrypted disks

  • Encrypting

  • Decrypting

  • Encrypted by the user

  • Encrypted (partially)

  • Encrypted by the user (partially)

Encryption pending user action

The user must restart the computer or enter data to complete the encryption process.

Boolean

Authentication method

Authentication method selected to encrypt disks.

  • All

  • Unknown

  • Security processor (TPM)

  • Security processor (TPM) + Password

  • Password

  • USB drive

  • None

Encryption date

Date when the first drive was encrypted on a fully encrypted computer (all compatible drives are encrypted).

Date

TPM spec version

Version of the TPM specifications supported by the chip on the computer.

Character string

Encryption installation error date

Date of the last reported installation error.

Date

Encryption installation error

An error occurred installing the Cytomic Encryption module on the computer.

Character string

Encryption error date

Last date when an encryption error was reported on the computer.

 

Encryption error

The encryption process returned an error.

Character string

Fields in the exported file

Filter tool
Field Comment Values

Encryption date from

Start point of the date range for fully encrypted computers.

Date

Encryption date to

End point of the date range for fully encrypted computers.

Date

Platform

Operating system installed on the computer.

  • All

  • Windows

  • macOS

Computer type

Type of device.

  • Workstation

  • Laptop

  • Server

Disk status

Encryption status of the computer internal storage media.

  • Unknown

  • Unencrypted disks

  • Encrypted disks

  • Encrypting

  • Decrypting

  • Encrypted by the user

  • Encrypted (partially)

  • Encrypted by the user (partially)

Hard disk encryption

Cytomic Encryption module status.

  • No information

  • Enabled

  • Disabled

  • Error

  • Install error

  • No license

Authentication method

Authentication method selected to encrypt disks.

  • All

  • Unknown

  • Security processor (TPM)

  • Security processor (TPM) + Password

  • Password

  • USB drive

  • None

Last connection

Date when the Advanced EDR status was last sent to the Cytomic cloud.

Date

Encryption pending user action

Indicates whether the user must take action to complete the encryption process.

  • All

  • Yes

  • No

Filters available in the list

Computer details page

Click a row in the list to open the computer details page. For more information, see Computer details.