https://store-images.s-microsoft.com/image/apps.20301.60e7cd8d-b74b-482e-b864-ada7d8411426.15f98adc-1d51-4c04-958f-8e2bde6a3606.9f86776d-7dc7-489b-b6d5-ee3a3d369a8f

CyberArk Endpoint Privilege Manager for Microsoft Sentinel

by CyberArk

Extract security events from CyberArk Endpoint Privilege Manager (EPM) into Microsoft Sentinel

CyberArk Endpoint Privilege Manager (EPM) helps to remove the barriers to enforcing least privilege and allows organizations to block and contain attacks at the endpoint, reducing the risk of information being stolen or encrypted and held for ransom.

The Microsoft Sentinel solution for CyberArk EPM allows a security administrator to pull Application Events and Policy Audit from EPM management console using the cloud APIs, into Microsoft Sentinel for analysis and as part of customers threat modeling procedures.

Data Connectors: 1, Parsers: 1

At a glance

https://store-images.s-microsoft.com/image/apps.63972.60e7cd8d-b74b-482e-b864-ada7d8411426.15f98adc-1d51-4c04-958f-8e2bde6a3606.afb3da42-1588-44a1-bf72-088374d42e3c