At the core of the 4200 is the FireEye Attack Confirmation Technology (FACT) engine.

The FACT engine is a network-based technology that creates an infinite supply of virtual victim machines to scan real-time network traffic flows for stealthy, targeted malware.

• Suspicious network traffic is mirrored into the FACT engine.
• The engine first flags suspicious network activities.
• Then, targeted attacks are confirmed within virtual victim machine analysis
• On attack confirmation, automated security actions are immediately taken to protect other network resources.