Running the DATA RECON CLI

Running the DATA RECON CLI executable immediately attempts a scan.

The DATA RECON CLI automatically loads datarecon.cfg when run, altering your scan configuration. If your loaded datarecon.cfg is set up for DATA RECON to load a specific journal file, DATA RECON loads that journal file when run with datarecon.cfg.

If you do not want to load these files when you run the DATA RECON CLI, use the -c and -journal flags OR remove these files from the directory.

For more information, see DATA RECON CLI Options.

Running the DATA RECON CLI on Windows

Locate the Windows CLI executable: datarecon_2.0.xx.exe

There are 2 ways to run the Windows CLI.

Method 1

1. Locate datarecon_2.0.xx.exe in Windows Explorer.
2. Right-click datarecon_2.0.xx.exe, select Run as administrator and enter the administrator password if prompted.
3. In the terminal, DATA RECON will prompt you to validate your license
4. Log in using one of the three methods (see Logging into DATA RECON for more information):
   • Ground Labs Login.
   • Use an online token.
   • Use offline license file.

Method 2

1. Click Start to open the Start Menu.
2. Enter cmd to search for cmd.exe, or find it in Start > All Programs > Accessories > Command Prompt.
3. Right-click cmd.exe or the Command Prompt program and select Run as administrator. Enter the administrator password if prompted.

4. In the newly-opened Command Prompt window, navigate to the folder where your DATA RECON executable is located.

   # If your DATA RECON executable is in the Downloads folder cd c:\User\username\Downloads\

5. To run the DATA RECON executable with default settings, issue this command:

   # Run a default scan, save a compliance report and an encrypted database journal file. datarecon_2.0.xx.exe -j journal-filename.jnl -password-inline password

   Saving a database journal file allows you to inspect and remediate matches in the DATA RECON GUI.
6. DATA RECON prompts you to validate your license.
7. Log in using one of the three methods (see Logging into DATA RECON for more information):
   • Ground Labs Login.
   • Use an online token.
   • Use offline license file.
   DATA RECON may ask you to select a Client and Project Group. If you are the only user or the licensee, select Default Client and Default Project when prompted . If not, check with your system administrator or the licensee.

8. Once logged in, DATA RECON runs a scan with default settings. When the scan completes, DATA RECON automatically saves a compliance report.

   To inspect and remediate matches found by DATA RECON, load the database journal file (e.g. journal-filename.jnl) saved by the DATA RECON CLI in the DATA RECON GUI (see Results and Remediation).

Running the DATA RECON CLI on Linux and Unix-like Systems

1. In the Terminal, locate the DATA RECON executable. E.g. datarecon_linux26_2.0.xx.

2. Open your terminal and run:

   chmod u+x datarecon_linux26_2.0.xx

3. Run the following command as root:

   # Run a default scan, save a compliance report and an encrypted database journal file. ./datarecon_linux26_64_2.0.xx -j journal-filename.jnl -password-inline password

4. DATA RECON prompts you to validate your license.

   Managing licenses
   Project and license groups are usually used by the licensees or IT administrators who manage your software licenses to assign permissions to certain groups of users.
   
   If you are not sure of which project or license group to use, contact your IT administrator or the licensee for more information. If you are the licensee, IT administrator, or the only user, you can choose Default Project or Default Client.
   
   For more information on how to manage your licenses, please see DATA RECON Licensing.
5. Log in using one of the three methods (see Logging into DATA RECON for more information):
   • Ground Labs Login.
   • Use an online token.
   • Use offline license file.
   DATA RECON may ask you to select a Client and Project Group. If you are the only user or the licensee, select Default Client and Default Project when prompted . If not, check with your system administrator or the licensee.

If you have not assigned a license to the current TARGET, DATA RECON will return a list of licenses available in your Ground Labs Services Portal.

DATA RECON should ask you to confirm authorisation of the TARGET. For more information on DATA RECON licensing, see DATA RECON Licensing.

DATA RECON starts scanning the TARGET with default settings.

Once done, DATA RECON automatically saves a compliance report. To inspect and remediate matches found by DATA RECON, load the database journal file (e.g. journal-filename.jnl) saved by the DATA RECON CLI in the DATA RECON GUI (see Results and Remediation).

To open these files, issue the following command as administrator:

# Where <filename>.pdf is the file saved by DATA RECON that you want to open. chmod 644 <filename>.pdf