Install Guide

Switch Meaning
-s Silent operation
-o Output file path
-a Append to output file. The default behavior truncates the output file.
-f Report format specifier (Report, Fixed, Delimited)
-r Run WSScan without administrator privileges. Some files may not be visible in this
mode.
-u Include unencrypted files in output file.
This switch is sensitive to order: "u" must be first, "a" must be second (or omitted), "-"
or "v" must be last.
-u- Only include unencrypted files in output file
-ua Report unencrypted files also, but use all user policies to display the "should" field.
-ua- Report unencrypted files only, but use all user policies to display the "should" field.
-uv Report unencrypted files that violate policy only (Is=No / Should=Y)
-uav Report unencrypted files that violate policy only (Is=No / Should=Y), using all user
policies.
-d Specifies what to use as a value separator for delimited output
-q Specifies the values that should be in enclosed in quotes for delimited output
-e Include extended encryption fields in delimited output
-x Exclude directory from scan. Multiple exclusions are allowed.
-y Sleep time (in milliseconds) between directories. This switch results in slower scans, but
potentially a more responsive CPU.
WSScan Output
WSScan information about encrypted files contains the following information.
Example Output:
[2015-07-28 07:52:33] SysData.7vdlxrsb._SDENCR_: "c:\temp\Dell - test.log" is still AES256 encrypted
Output
Meaning
Date/time stamp The date and time the file was scanned.
Encryption type The type of encryption used to encrypt the file.
SysData: SDE key.
User: User encryption key.
Common: Common encryption key.
WSScan does not report files encrypted using Encrypt for Sharing.
KCID The Key Computer ID.
As shown in the example above, "7vdlxrsb"
110 Troubleshooting