Aurora Vulnerability Management glossary

These are terms used throughout the Aurora Vulnerability Management (Aurora VM) solution. These terms appear in the Unified Portal and other interfaces.

Age
The number of days since the risk was discovered. The Age value only populates for risks with a Status of Unresolved and a State other than Accepted or False Positive.
Arctic Wolf Agent
An endpoint security management tool that creates an inventory of endpoint devices in your network and performs routine scans to identify security risks. For more information, see Arctic Wolf Agent.
Arctic Wolf Analytics
A legacy tool used to view and organize in-depth Aurora VM and Agent information in your environment. For more information, see Arctic Wolf Analytics.
Arctic Wolf Resolve
A patch management system available as an additional subscription to Aurora VM. For more information, see Arctic Wolf Resolve.
Asset
An endpoint in your environment that was discovered through an Agent or IVA scan. Risks are associated with assets. For more information, see Assets.
Asset Category
The category of an asset. For example, Desktop, Laptop, or Printer. This information helps you to identify the purpose of the asset.
Note: If there is not enough information to classify an asset, the asset appears in the Unassigned category.
Asset Criticality
The criticality of an asset to your daily operations. Use this value to indicate the business disruption in the event of an incident. For more information, see Edit asset criticality.
Asset Tags
Tags that are associated with an asset. Use them to group assets for risk remediation. For more information, see Apply a tag to an asset.
Aurora Vulnerability Management (Aurora VM)
A solution that enables you to discover, assess, and harden your environment against cyber risks across your networks, endpoints, and cloud environments. Aurora VM gathers information through physical and virtual scanners. Insights derived from this information appear in the Arctic Wolf Unified Portal, Risk Dashboard, and Arctic Wolf Analytics.
Aurora Vulnerability Management Scanner (Aurora VM Scanner)
A physical or virtual scanner that performs Internal Vulnerability Assessment (IVA) scans to identify risk in your environment. For more information, see Aurora Vulnerability Management Scanners.
Assignee
The user assigned to remediate a risk.
Cloud Security Posture Management (CSPM)
An extension of the Aurora VM service that scans your cloud environment for misconfigurations and other cybersecurity risks. For more information, see Cloud Security Posture Management Configurations.
Vulnérabilités et expositions courantes (CVE)
A known vulnerability listed in the Base nationale de données sur les vulnérabilités (NVD). If a risk is associated with a known CVE entries, a link to the entry appears in the Unified Portal.
Système de notation des vulnérabilités courantes (CVSS)
An open framework for communicating the severity of information security vulnerabilities. Arctic Wolf uses version 3 of this framework as an objective metric for prioritizing vulnerabilities.
Agence de cybersécurité et de sécurité des infrastructures (CISA) - Vulnérabilités connues et exploitées (KEV)
A catalog containing known risks. If the CISA KEV field for a risk is Yes, it is part of the CISA KEV catalog.
Due Date
The date by which a risk is expected to be resolved. This value is set manually by your organization.
Executive Summary Report
A summary of your organization's security posture that you can share with executives and stakeholders. Use this report to help with risk exposure awareness, track risk exposure reductions over time, and to identify actions that can help improve your security posture. For more information, see Create an Executive Summary report.
External Vulnerability Assessment (EVA)
Automated vulnerability tests used to verify the strength of your externally facing services and to increase your security posture. For more information, see External Vulnerability Assessment.
Internal Vulnerability Assessment (IVA)
Continuous or scheduled scans of your internal network that an Aurora VM Scanner performs to detect vulnerabilities.
Patch Job Status
The status of a patch job. This field can have one of these values:
  • Patch Scheduled — The patch is scheduled to begin on the date listed in the Schedule field.
  • Download In Progress — The patch is currently downloading.
  • Download Complete — The patch downloaded, but not been applied.
  • Patch Processing — The patch is being applied.
  • Patch Complete — The patch completed successfully.
  • Patch Failed — At least one application in a patch job failed to apply. If troubleshooting this issue, check which applications failed.
  • Patch Cancelled — The patch cancelled.
  • Patch Retrying — The patch previously failed. Arctic Wolf Resolve is attempting to apply it again.
  • End of Support — The software patch is not active, functioning, or is no longer supported by the software vendor. This means that no new features, bug fixes, security patches, or official support is available, even if the software still functions.
Patch Status
The current state of the software patch for the vulnerability. This information is only available if you have a Arctic Wolf Resolve subscription. This field can have one of these values:
  • Patch Available — A software patch is available for the vulnerability, but no action has been initiated. This value is only available when Arctic Wolf Agent is installed on the asset and the software is supported by the feature.
  • Patch Initiated — The software patch was scheduled for deployment and a notification has been sent to end users.
  • Patch Applied — The software patch was successfully applied to the vulnerability.
  • Patch Failed — The software patch was initiated, but it was not applied. No attempt will be made to apply the patch again.
  • Patch Deferred — The end user deferred the installation of the software patch. An attempt will be made to apply the patch again.
  • End of Support — The software patch is not active, functioning, or is no longer supported by the software vendor. This means that no new features, bug fixes, security patches, or official support is available, even if the software still functions.
  • Patch Unavailable — Software patch details are not available for the risk at this time, but might exist in the future. This includes EVA and IVA risks that do not have a supported patch.
  • Not Subscribed — Patch status is not available to your organization because you do not have an Arctic Wolf Resolve subscription.
Resolution Reason
The action that resolved a risk. This field can have one of these values:
  • Scan — The latest successful vulnerability scan did not detect the risk.
  • Asset Deleted — The asset that the risk was associated with was deleted.
  • Stale — A vulnerability scan has not successfully completed within the last 45 days.
Risk Dashboard
The legacy dashboard used for managing risks. For more information, see Risk Dashboard.
Risk Exposure Score
The overall risk level of your organization. For more information, see Risk Exposure Score calculation.
Risk Evidence
The detection finding details of an individual risk to help you improve your understanding of why an asset is considered vulnerable and what the risk impact is on your organization. The detection finding details are grouped by the source that identified the risk. For example, Agent or IVA.
Risk Score
The score representing the importance of an individual risk.
Risk Severity
The severity of a risk, based on risk score. Risk severity increases with risk score.
Risk State
The state of the risk, which is manually assigned by a user. Use this value to track whether a risk is actively being resolved. For more information, see Risk states.
Risk Status
The status of the risk that indicates whether the risk is resolved. This value is automatically assigned by the scanner. For more information on when the risk status changes, see Risk lifecycle.