[SAASINT-5127] DDS: CyberArk Endpoint Privilege Manager: Crawler Integration v1.0.0 (DataDog#22120)

* Add assets for CyberArk EPM integration

* Update pipeline yaml file

* Resolve validate-logs CI check

* minor README update

* Minor dashboard updates

* update README as per review comments

* Update README.md

* Resolve validate-dashboards CI check

* Update labeler yaml file

* Remove service remapper dependency

* Resolve CI Failures

* Fix merge conflict in CODEOWNERS file

Removed merge conflict markers from CODEOWNERS.

---------

Co-authored-by: akaila-crest <abhi.kaila@crestdata.ai>
Co-authored-by: shubhamvekariya-crest <157569826+shubhamvekariya-crest@users.noreply.github.com>
Co-authored-by: shubhamvekariya-crest <shubham.vekariya@crestdata.ai>
Co-authored-by: Gustavo Gutierrez <gustavogut1993@gmail.com>
Co-authored-by: Gustavo Gutierrez <gustavo.gutierrez@datadoghq.com>

Author: 4 people

.github/CODEOWNERS

@@ -772,6 +772,7 @@ plaid/assets/logs/                                                  @DataDog/saa
 /cyberark_endpoint_privilege_manager/*.md                            @DataDog/saas-integrations @DataDog/documentation
 /cyberark_endpoint_privilege_manager/manifest.json                   @DataDog/saas-integrations @DataDog/documentation
 /cyberark_endpoint_privilege_manager/assets/logs/                    @DataDog/saas-integrations @DataDog/documentation @DataDog/logs-integrations-reviewers
+
 /beyondtrust_privileged_remote_access/                               @DataDog/agent-integrations
 /beyondtrust_privileged_remote_access/*.md                           @DataDog/agent-integrations @DataDog/documentation
 /beyondtrust_privileged_remote_access/manifest.json                  @DataDog/agent-integrations @DataDog/documentation

.github/workflows/config/labeler.yml

@@ -402,6 +402,10 @@ integration/crowdstrike_fdr:
 - changed-files:
   - any-glob-to-any-file:
     - crowdstrike_fdr/**/*
+integration/cyberark_endpoint_privilege_manager:
+- changed-files:
+  - any-glob-to-any-file:
+    - cyberark_endpoint_privilege_manager/**/*
 integration/databricks:
 - changed-files:
   - any-glob-to-any-file:

cyberark_endpoint_privilege_manager/README.md

@@ -1,39 +1,60 @@
-# Agent Check: cyberark_endpoint_privilege_manager
-
 ## Overview
 
-This check monitors [cyberark_endpoint_privilege_manager][1].
-
-## Setup
+[CyberArk Endpoint Privilege Manager][1] enforces least privilege and enables organizations to block and contain attacks on endpoint computers, reducing the risk of information being stolen or encrypted and held for ransom. 
 
-### Installation
+This integration ingests the following logs:
 
-The cyberark_endpoint_privilege_manager check is included in the [Datadog Agent][2] package.
-No additional installation is needed on your server.
+- **Raw Events**: Endpoint activities captured by EPM agents, including threat detection events.
+- **Policy Audit Events**: Audit records of policy usage on endpoints.
+- **Set Admin Audit Events**: Actions carried out by EPM administrators within sets.
+- **Account Admin Audit Events**: Actions performed by account administrators.
 
-### Configuration
+Integrate CyberArk Endpoint Privilege Manager with Datadog to gain insights into raw events, policy audit events, set admin audit events, and account admin audit events using pre-built dashboard visualizations. Datadog uses its built-in log pipelines to parse and enrich these logs, facilitating easy search and detailed insights. Additionally, the integration can be used for Cloud SIEM detection rules for enhanced monitoring and security.
 
-!!! Add list of steps to set up this integration !!!
 
-### Validation
+## Setup
 
-!!! Add steps to validate integration is functioning as expected !!!
+### Create a User in CyberArk Endpoint Privilege Manager
+1. Log in to the CyberArk Endpoint Privilege Manager portal.
+2. Navigate to **Administration**.
+3. Open the **Account Management** section.
+4. Click **Create** and then click on **Create User** from the dropdown.
+5. Enter the following details:
+   - Email
+   - Password
+   - Confirm Password
+6. Select the **Account Administrator** checkbox and choose the **View Only** option.
+7. Select the **Allow to Manage Sets** checkbox.
+8. Click **Next**.
+9. Assign the **View Only Set Admin** role for all listed sets.
+10. Click **Finish**.
+
+
+### Connect your CyberArk Endpoint Privilege Manager Account to Datadog
+
+1. Add your `EPM Account Region`, `Username`, and `Password`.
+   | Parameters | Description |
+   | ---------- | ---------------------------------------------- |
+   | EPM Account Region | The EPM Account Region of your CyberArk Endpoint Privilege Manager.|
+   | Username | The Username of CyberArk Endpoint Privilege Manager account which has access to the available sets.|
+   | Password | The CyberArk Endpoint Privilege Manager account password.|
+2. Click **Save**.
 
 ## Data Collected
 
+The CyberArk Endpoint Privilege Manager integration collects and forwards raw events, policy audit events, set admin audit events, and account admin audit events to Datadog.
+
 ### Metrics
 
-cyberark_endpoint_privilege_manager does not include any metrics.
+The CyberArk Endpoint Privilege Manager integration does not include any metrics.
 
 ### Events
 
-cyberark_endpoint_privilege_manager does not include any events.
+The CyberArk Endpoint Privilege Manager integration does not include any events.
 
 ## Troubleshooting
 
-Need help? Contact [Datadog support][3].
-
-[1]: **LINK_TO_INTEGRATION_SITE**
-[2]: https://app.datadoghq.com/account/settings/agent/latest
-[3]: https://docs.datadoghq.com/help/
+Need help? Contact [Datadog support][2].
 
+[1]: https://www.cyberark.com/products/endpoint-privilege-manager/
+[2]: https://docs.datadoghq.com/help/