The Exploit Prevention Events menu displays a specific subset of Threat Event IDs related to Exploit Prevention. This menu includes events only for ExP API and Buffer Overflow signature types (Threat Event IDs 18051 through 18057).
Events related to Access Protection, Network Intrusion, and Exploit Prevention Files/Process/Registry violations (Threat Event IDs 18058, 18059, and 18060) are displayed on the separate McAfee ePO Threat Events menu.
Use the following table to determine where to find specific Exploit Prevention event types in the McAfee ePO console:
Event Menu Location | Threat Event IDs | Event Signature Types |
|---|---|---|
Exploit Prevention Events | 18051 to 18057 | ExP API, Buffer Overflow signatures |
Threat Events | 18058 to 18060 | Access Protection, Network Intrusion, Files/Process/Registry violations |
Note
For a complete list of event IDs for Endpoint Security, see KB85494.