CyberArk’s PTA is a modern system designed for privileged account security intelligence that provides detailed, immediate actionable threats analytics by pinpointing previously hidden malicious privileged user activity. Privileged Threat Analytics (PTA) continuously monitors the use of privileged accounts that are managed in the CyberArk Privileged Access Security (PAS) platform, as well as accounts that are not yet managed by CyberArk, and looks for indications of abuse or misuse of the CyberArk platform. PTA also looks for attackers who compromise privileged accounts by running sophisticated attacks, such as Golden Ticket.
For a full list of detections reported by PTA, see here.
Architecture
Syslog is supported and events are CEF formatted. Relevant docs here.
Integration release checklist
This checklist is intended for integrations maintainers to ensure consistency
when creating or updating a Package, Module or Dataset for an Integration.
Description
CyberArk’s PTA is a modern system designed for privileged account security intelligence that provides detailed, immediate actionable threats analytics by pinpointing previously hidden malicious privileged user activity. Privileged Threat Analytics (PTA) continuously monitors the use of privileged accounts that are managed in the CyberArk Privileged Access Security (PAS) platform, as well as accounts that are not yet managed by CyberArk, and looks for indications of abuse or misuse of the CyberArk platform. PTA also looks for attackers who compromise privileged accounts by running sophisticated attacks, such as Golden Ticket.
For a full list of detections reported by PTA, see here.
Architecture
Syslog is supported and events are CEF formatted. Relevant docs here.
Integration release checklist
This checklist is intended for integrations maintainers to ensure consistency when creating or updating a Package, Module or Dataset for an Integration.
All changes
New Package
Dashboards changes
Log dataset changes
sample_event.json
) exists