View Frontier Virtual Patching Detections
Drill down through Frontier Virtual Patching predisclosure detections in Activity
Insights to investigate exploit categories, individual signatures, and protection
status.
| Where Can I Use
This? | What Do I Need? |
|---|
When you have an Advanced Threat Prevention Plus license, Activity Insights includes a
Pre-Disclosure Exploits detection type that shows threats detected by Frontier Virtual
Patching signatures. These are vulnerabilities that have not been publicly disclosed or
patched by software vendors.
Predisclosure Exploit Drill-Down
Select the Pre-Disclosure Exploits category to view only the threats detected by
Frontier Virtual Patching signatures. The drill-down shows the blocked and alerted
totals for predisclosure detections, with the attack category breakdown.
Select an attack category (such as Exploitation and Code Execution) to view the
specific subcategories (for example, Code Execution, Pre-Disclosure Vulnerability,
Overflow, SQL Injection, Command Injection, and others). The available subcategories
depend on the detection types active in your environment.
Predisclosure Threats List
The threats list displays individual Frontier Virtual Patching signatures with the
following columns:
- Severity—Critical, High, or Medium.
- Threat Name—"Pre-Disclosure Vulnerability Exploit" for all predisclosure
signatures.
- Total by Actions—A breakdown of total detections, blocked count, and
alerted count.
- Users—The number of users whose traffic triggered the signature.
- Applications—The number of applications associated with the
detections.
- Devices—The number of devices that detected the signature.
- Category—The attack category (such as "Exploitation and
Code Execution").
- Sub Category—The specific attack type (such as "Code Execution" or
"Command Injection").
- License—The threat license type (for example,
"advanced_threat_prevention_plus").
- Threat ID—The unique, permanent Threat ID.
- Rule Name—The security policy rule that matched the traffic.
Signature Details
Select a predisclosure signature from the threats list to view its full details in
Threat Search. The detail view displays the predisclosure metadata, protection
status, and evidence in your network. For a full description of the predisclosure
fields and how to identify when a signature has moved from predisclosure to
disclosed, see
View Frontier Virtual Patching
Signature Details in Threat Search.
