The EPM Agent is responsible for managing and communicating password changes in credential rotation within the Endpoint Privilege Manager (EPM) system. It actively interacts with endpoint devices to enforce security policies, rotate credentials, and ensure that updated credentials are communicated effectively.
To enable the end-user dialog for notifying users when the Elevate policy grants elevation for their applications, the EPM Administrator should navigate to the End-User UI within the policy. This section within the policy allows specific configurations for notifications and user interactions relevant to elevation events.
CyberArk recommends implementing Privilege Management first as it focuses on controlling and managing user's administrative privileges effectively. This step helps in reducing the attack surface by ensuring that only authorized applications and users have elevated access. By controlling and monitoring privilege escalation, organizations can prevent many types of security breaches, making it a foundational strategy in a robust cybersecurity program.
To include a particular file extension to be monitored and protected under Ransomware Protection, the EPM Administrator should configure the Default Policies setting. This setting allows for the inclusion of specific file extensions to be monitored as part of the ransomware protection strategy.
The purpose of Discovery in the Privilege Management phase of deploying EPM (Endpoint Privilege Manager) is to identify all administrative level events. This allows the system to recognize which applications and processes require administrative privileges, so these can be managed appropriately to reduce the risk of privilege abuse.