DRAG DROP -
Match each PTA alert category with the PTA sensors that collect the data for it.
Select and Place:
DRAG DROP -
Match each PTA alert category with the PTA sensors that collect the data for it.
Select and Place:
Reference:
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PTA/What-Does-PTA-Detect.htm?TocPath=End%20User%7CSecurity%20Events%
7C_____4
Suspected credentials theft - SIEM / Unix / AWS / Azure,Vault Unmanaged privileged account - SIEM / Unix / AWS / Azure,Vault,AD (optional) Anomalous access to multiple machines - Network Sensor,PTA Windows Agent Suspicious activities detected in a privileged session - Vault