CyberArk Endpoint Privilege Manager (EPM) Training

Curriculum:

Module 1: Introduction to CyberArk EPM

• Overview of Privileged Access Management (PAM)
• What is Endpoint Privilege Manager (EPM)?
• EPM use cases and benefits
• EPM vs traditional endpoint security tools

Module 2: CyberArk EPM Architecture

• EPM components and deployment models
• SaaS vs On-Prem EPM overview
• Communication flow and agent architecture
• Endpoint onboarding process

Module 3: Endpoint Privilege Security Fundamentals

• Least privilege principles
• Application control concepts
• Threat landscape and attack vectors
• Credential theft and ransomware risks

Module 4: EPM Installation & Setup

• EPM tenant setup
• Agent installation and deployment
• Endpoint grouping and policies
• Initial configuration best practices

Module 5: Policy Management & Privilege Elevation

• Policy types and structure
• Application control rules
• Privilege elevation and delegation
• Allow, block, restrict, and monitor actions

Hands-On: Create privilege elevation policies

Module 6: Application Control & Threat Protection

• Application whitelisting and blacklisting
• Application reputation and trust
• Exploit and ransomware protection
• Credential theft prevention

Module 7: Advanced Policy Configuration

• Policy inheritance and precedence
• Rule exceptions and conditions
• File and application attributes
• Script and macro control

Module 8: Monitoring, Alerts & Reporting

• Monitoring endpoint activity
• Alerts and notifications
• Audit logs and forensic data
• Compliance and security reports

Hands-On: Generate and analyze EPM reports

Module 9: Incident Handling & Troubleshooting

• Common EPM issues and resolution
• Policy troubleshooting techniques
• Agent diagnostics and logs
• Performance tuning

Module 10: Integration & Enterprise Management

• Integration with Active Directory
• Integration with SIEM/SOC tools
• Endpoint lifecycle management
• Patch and update considerations

Module 11: Best Practices & Security Governance

• EPM best practices for enterprises
• Policy design standards
• Change management and documentation
• Security governance and compliance alignment

Module 12: Real-World Use Cases & Case Studies

• Endpoint lockdown scenarios
• Ransomware prevention case study
• Privilege abuse detection
• Enterprise rollout strategy