General

Primary IP address and alias IP address of the computer.

Path to the computer in the company Active Directory.

Group in the Cytomic EDR or Cytomic EPDR group tree to which the computer belongs. To change the computer group, click Change.

Name of the operating system installed on the computer.

Client info

Identifier of the client to which the computer belongs in the Cytomic Orion systems.

Name of the client.

Date and time when the client was created in the Cytomic systems.

Computer

Name of the computer on the client’s network.

Computer type:

• Desktop

• Server

• Laptop

• Mobile device (smartphone, tablet, etc.)

Type of operating system installed on the computer.

• Windows

• Linux

• macOS

• Undefined

Unique identifier of the computer in Cytomic Orion.

List of all the IP addresses (primary addresses and aliases) of the computer.

Physical address of the network cards installed on the computer.

Windows domain the computer belongs to. This is empty if the computer does not belong to a domain.

Path to the computer in the organizational unit hierarchy.

Group in the Cytomic EDR or Cytomic EPDR group tree to which the computer belongs. To change the computer group, click Change.

Name of the operating system installed on the computer.

Indicates whether the computer is physical or virtual.

Indicates whether the operating system of the virtual machine resides on a storage device that persists between restarts, or reverts to its original state instead.

Cytomic product licenses installed on the computer.

• Assigned

• Not assigned

Internal version of the Cytomic agent installed on the computer.

Language in which Cytomic EDR or Cytomic EPDR shows the local console and pop-up messages.

Shows the isolation status of the computer:

• Isolated

• Isolating

• Stop isolating

• Not isolated

The computer is pending restart.

Date and time when the agent was installed on the user computer and the computer was registered in the Cytomic cloud.

Date and time when the client software last connected to the Cytomic cloud. The communications agent connects to the cloud at least every four hours.

Date and time when the computer was last booted.

Security

Indicates whether the Cytomic EDR or Cytomic EPDR advanced protection module is enabled on the user computer, and the execution mode (Audit, Hardening, or Lock).

Indicates whether the Cytomic EDR or Cytomic EPDR file protection module is enabled on the user computer.

Indicates whether the protection for the protocols used to send and receive email is enabled on the user computer.

Indicates whether the protection against malware downloaded from web pages is enabled on the user computer.

Indicates whether the module for protecting against network traffic generated by applications on the user computer is enabled.

Indicates whether the module is enabled that protects against infections through external storage devices or devices that allow user computers to connect to the Internet bypassing the organization communications infrastructure (USB modems and others devices).

Indicates whether the module for protecting against viruses received at Microsoft Exchange servers is enabled.

Indicates whether the module for protecting against spam received at Microsoft Exchange servers is enabled.

Indicates whether the protection is enabled for email messages received at Microsoft Exchange servers that could have attachments with dangerous extensions.

Indicates whether the module is enabled that protects against users accessing web content not permitted by the administrator.

Indicates whether the patch and update module for Windows operating systems and third-party applications is enabled on the user computer.

Indicates whether the module for tracking personal data is enabled.

Indicates whether the module is enabled that mitigates the exposure of data in the event of theft of an Android device.

Indicates whether the file encryption module is enabled on the user computer.

Indicates whether the computer has a Cytomic Data Watch settings profile assigned that allows it to receive file searches and report their results.

Protection

Indicates whether the protection module installed on the computer is the latest version released by Cytomic.

• Updated

• Not updated (seven days without updating since last release)

• Pending restart.

Version of the Cytomic EDR or Cytomic EPDR protection module installed on the user computer.

Shows whether the computer signature files (knowledge files) match the latest files released by Cytomic.

• Updated

• Not updated (three days without updating since last release)

Date and time when the signature files were last updated on the computer.

Data protection

Indicates whether you can examine files stored on supported storage devices to create a database on the computer and speed up content retrieval.

Indicates whether the computer has the extensions required to access Microsoft Office files.