virtacryptdetect

This command runs Encryption Detection for a container. Administrator privileges are required.

When you execute virtacryptdetect, an Encryption Detection log file called CryptDetectionLog.txt is created in the <Container>\ctrack\Log folder. The file contains the paths of the files and the lines on which they are located in these files. The file also contains the paths of the registry keys and the names of the values that are encrypted.

Syntax

virtacryptdetect [/S] [/P] [/FT=<number>] [/RT=<number>] [/FO] [/RO] VAA

Options

Option

Description

VAA

The full path of the container.

/S

Silent mode. No output will be shown on the command line.

/P

Smart Parameter Mode. The utility will use a different matching process to find encryption only in tags such as: <Encryption> </Encryption> or "Encryption" "Encryption". This allows the utility to be more specific when detecting encryption.

/FT=<number>

File Encryption Threshold. The specified number determines how much precision will be used during detection. The higher the number specified, the more precise the detection. The default value is 14. Any value lower than 8 is not recommended.

/RT=<number>

Registry Encryption Threshold. The specified number determines how much precision will be used during detection. The higher the number specified, the more precise the detection. The default value is 12. Any value lower than 8 is not recommended.

/FO

Run Encryption Detection on files only.

/RO

Run Encryption Detection on the registry only.