EPM-DEF CyberArk Defender - EPM Questions and Answers

Event Queue Flush Period

Heartbeat Timeout

Condition Timeout

Policy Update Rate

Privilege Escalation, Privilege Management, Application Management

Privilege Management, Application Control, Threat analysis

Privilege Management, Threat Protection, Application Escalation Control

Privilege Management, Privilege Threat Protection, Local Privileged Accounts Management

NSRL

Palo Alto Wildfire

VirusTotal

CyberArk Application Risk Analysis Service (ARA)

Add trusted software to the Authorized Applications (Ransomware protection) Application Group

Add trusted software to the Allow Application Group

Add additional files, folders, and/or file extensions to be included to Ransomware Protection

Enable Detect privileged unhandled applications under Default Policies

Add any pre-existing security application to the Files to Be Ignored Always.

Add EPM agent to the other security tools exclusions.

EPM agent should never be run with any other security tools.

Create new advanced policies for each security tool.

Windows Registry Keys

Website Data

Local Administrator Passwords

Certificates in the Certificate Store