CyberArk – data extraction and collect

This add-on is now deprecated with Descartes and IAP2.0, please refer to the add-on bw_ias_cyberark

——————-

This add-on allows to extract and upload data into the Identity Ledger from a CyberArk instance.

The following elements are extracted and consolidated into the Brainwave GRC database:

• • CyberArk users

• • CyberArk groups

• • CyberArk Vault

• • CyberArk Safes

• • Access rights details to Vault and Safes

This add-on provides an overview on CyberArk access rights: who can do what on which safe, who can administrate the Vault.

It manages accounts and groups available in CyberArk and the mapping with any LDAP or AD referential.

One silo is provided: “cyberark” and allows to upload and consolidate into the Identity Ledger the Vault, Safes, users and groups access rights details.

This silo works in iterative mode, so that it manage multi vaults environments. Please refer to the documentation for a good match between this feature and the data extraction format.

version Beta 0.4

Update of the default column separator in the discovery files and of the documentation.

version Beta 0.3

This version handles now accounts and groups from LDAP or AD when synchronization is done between CyberArk and these directories. It handles also the multi Vault.

version Beta 0.2

Initial version with all accounts and groups created in CyberArk repository, including those from AD and LDAP.