Update cyberark-epm-misconfigurations.json

rule-packs/cyberark-epm-misconfigurations.json

@@ -1,31 +1,31 @@
 [
   {
-    "name": "cyberark-epm-application-control",
-    "description": "This query will look for applications that were installed before the EPM agent.",
+    "name": "cyberark-epm-blocked-applications",
+    "description": "This query will look for applications that have an unsatisfactory status.",
     "queries": [
       {
         "name": "query0",
-        "query": "FIND cyberark_epm_applicationgroup as ag with ag.startOn > cyberark_epm_hostagent startOn",
+        "query": "FIND cyberark_epm_applicationgroup with status != 'OK'",
         "version": "v1"
       }
     ],
     "alertLevel": "MEDIUM"
   },
   {
-    "name": "cyberark-epm-blocked-applications",
-    "description": "This query will look for applications that have an unsatisfactory status.",
+    "name": "cyberark-epm-application-groups-with-no-policy",
+    "description": "This query will look for application groups that have no policy associated.",
     "queries": [
       {
         "name": "query0",
-        "query": "FIND cyberark_epm_applicationgroup with status != 'OK'",
+        "query": "FIND cyberark_epm_applicationgroup THAT !ENFORCES << cyberark_epm_policy",
         "version": "v1"
       }
     ],
     "alertLevel": "MEDIUM"
   },
-  {
-    "name": "cyberark-epm-application-groups-with-no-policy",
-    "description": "This query will look for application groups that have no policy associated.",
+    {
+    "name": "cyberark-epm-service-with-no-policy",
+    "description": "This query will look for services that have no policy associated.",
     "queries": [
       {
         "name": "query0",