DATA RECON 2.0.25

Running the DATA RECON CLI

Running the DATA RECON CLI executable immediately attempts a scan.

When the DATA RECON runs, it looks for these files in its directory:

  • datarecon.cfg: default DATA RECON configuration file.
  • <license-file-name>.li2: OFFLINE LICENSE FILE; DATA RECON looks for any file ending with .li2.

If it finds any of these files in the directory that the DATA RECON executable occupies, it will try to load them when the DATA RECON runs.

The DATA RECON CLI automatically loads datarecon.cfg when run, altering your scan configuration. If your loaded datarecon.cfg is set up for DATA RECON to load a specific journal file, DATA RECON loads that journal file when run with datarecon.cfg.

If you do not want to load these files when you run the DATA RECON CLI, use the -c and -journal flags OR remove these files from the directory.

For more information, see DATA RECON CLI Options.

Running the DATA RECON CLI on Windows

Locate the Windows CLI executable: datarecon_2.0.xx.exe

There are 2 ways to run the Windows CLI.

Method 1

  1. Locate datarecon_2.0.xx.exe in Windows Explorer.
  2. Right-click datarecon_2.0.xx.exe, select Run as administrator and enter the administrator password if prompted.
  3. In the terminal, DATA RECON will prompt you to validate your license
  4. Log in using one of the three methods (see Logging into DATA RECON for more information):
    • Ground Labs Login.
    • Use an online token.
    • Use offline license file.

Method 2

  1. Click Start to open the Start Menu.
  2. Enter cmd to search for cmd.exe, or find it in Start > All Programs > Accessories > Command Prompt.
  3. Right-click cmd.exe or the Command Prompt program and select Run as administrator. Enter the administrator password if prompted.
  4. In the newly-opened Command Prompt window, navigate to the folder where your DATA RECON executable is located.

    # If your DATA RECON executable is in the Downloads folder cd c:\User\username\Downloads\

  5. To run the DATA RECON executable with default settings, issue this command:

    # Run a default scan, save a compliance report and an encrypted database journal file. datarecon_2.0.xx.exe -j journal-filename.jnl -password-inline password

  6. DATA RECON prompts you to validate your license.
  7. Log in using one of the three methods (see Logging into DATA RECON for more information):
    • Ground Labs Login.
    • Use an online token.
    • Use offline license file.
  8. Once logged in, DATA RECON runs a scan with default settings. When the scan completes, DATA RECON automatically saves a compliance report.

Running the DATA RECON CLI on Linux and Unix-like Systems

  1. In the Terminal, locate the DATA RECON executable. E.g. datarecon_linux26_2.0.xx.
  2. Open your terminal and run:

    chmod u+x datarecon_linux26_2.0.xx

  3. Run the following command as root:

    # Run a default scan, save a compliance report and an encrypted database journal file. ./datarecon_linux26_64_2.0.xx -j journal-filename.jnl -password-inline password

  4. DATA RECON prompts you to validate your license.

  5. Log in using one of the three methods (see Logging into DATA RECON for more information):
    • Ground Labs Login.
    • Use an online token.
    • Use offline license file.

If you have not assigned a license to the current TARGET, DATA RECON will return a list of licenses available in your Ground Labs Services Portal.
Data Recon CLI displaying the list of available licenses when attempting to scan a Target without an assigned license.

DATA RECON should ask you to confirm authorisation of the TARGET. For more information on DATA RECON licensing, see DATA RECON Licensing.

DATA RECON starts scanning the TARGET with default settings.

Once done, DATA RECON automatically saves a compliance report. To inspect and remediate matches found by DATA RECON, load the database journal file (e.g. journal-filename.jnl) saved by the DATA RECON CLI in the DATA RECON GUI (see Results and Remediation).

To open these files, issue the following command as administrator:

# Where <filename>.pdf is the file saved by DATA RECON that you want to open. chmod 644 <filename>.pdf