Findings
Generator
Configuration
Lucidum Reverse
Architecture
Statistics
← All Findings
Vendor:
CyberArk Endpoint Privilege Manager
FIN-764
Weight:
5
4
3
2
1
Confidence:
High
Medium
Low
Edited:
2026-03-27 16:10
Not Verified
What It Detects
Identifies CyberArk EPM-managed server endpoints that have no Asset Category assigned. Asset Category is used to classify servers by sensitivity tier (e.g., production, development, Tier 0/1/2), which drives policy assignment in EPM. Servers without a category may receive only default or permissive policies, leaving critical infrastructure without appropriate privilege controls.
MITRE ATT&CK Techniques
Comma-separated, e.g. T1078, T1190
Checks
read-only
Field
Operator
Value
Connectors
equals
CyberArk
Asset Type
equals
Server
Asset Category
is_empty
Remediation
×
×
×
×
+ Add item
Why It Matters
×
×
×
+ Add item
Save Changes
Export Lucidum