Audit Results - EEye Digital Security Retina User Manual

Using the Audit Tab
Enable Force Scan – Force the scanner to audit ports that do not answer
Randomize Target List – Cause the list of targets to be scanned in a random order. Useful when
scanning load-balanced systems.
Enumerate Registry via NetBIOS – Access the registry
Enumerate Users via NetBIOS – List users
Enumerate Shares via NetBIOS – List directory or drive shares
Enumerate Files via NetBIOS – List file shares
Enumerate Hotfixes via NetBIOS – List all installed hotfixes.
Enumerate Named Pipes via NetBIOS – List named pipes
Enumerate Machine Information via NetBIOS – List system information
Enumerate Audit Policy via NetBIOS – List administrative policy settings
Enumerate Per-User Registry Settings via NetBIOS – List user settings
Enumerate Groups via NetBIOS – List groups in use and their members
Enumerate Processes via NetBIOS – List running processes and services
Enumerate User and Group Privileges via NetBIOS
Note: The Connect Scan and Force Scan options can increase the length of time required to complete the scan by a
significant amount. Force Scan should not be used across a range. Force Scan should only be selected for specific
targets that are known to filter or otherwise ignore TCP, UDP, or ICMP probes. The Retina scanning engine will drop
to Connect Scan automatically when required. Connect Scan should only be used to trouble shoot cases where the
network connection is known to be unreliable. OS detection cannot be performed with Connect Scan enabled.
Note: Enumeration options affect Windows™ devices only.
11. Click the Scan button to start the job immediately. Or Schedule to set the job to run in the future or on a
schedule. For information on scheduling see Scheduling Scan Jobs on page 49.

Audit Results

The results of an audit scan are displayed in the Scanned IPs pane. This pane is divided into three sections. The first
section on the left is the IP list, the upper section on the right is the information section, and the lower section on the
right is the description section.
Notes On Scanning Ranges: If you enter a range, address group, or CIDR block that exceeds your licensed IP limit,
Retina will audit scan the range up to the number of addresses that you have licensed. If there are more responsive
targets in the range Retina will provide machine information on these systems so that you know how many there are
and what types of machines there are. However, there will not be any audits run against the addresses above your
license limit.
Retina Users Manual
35