https://techlab.blog/a-deep-dive-into-endpoint-privilege-management/