instance scan

[shivaadapa]

Hi 

Is instance scan can run on OOB records? can I get OOB records as findings?

[Mark Roethof]

See my earlier reply.

[Ehab Pilloor]

Hi Shiva,

The Instance Scan in ServiceNow focuses on scanning custom applications, plugins, and configurations rather than the OOB records. The primary purpose is to identify vulnerabilities in the customizations made to your instance.

If there have been updates or changes to the ServiceNow platform after my last knowledge update, it's recommended to check the official ServiceNow documentation or the ServiceNow community for the most up-to-date information. You can also reach out to the ServiceNow support team for specific and accurate details about the capabilities of Instance Scan in the latest versions of the platform.

If this answers your question, please mark this reply as solution.

Thanks and regards,

Ehab Pilloor

[Danish Bhairag2]

Hi @shivaadapa ,

yes it does work on OOTB files as well. It will create a finding for those records but it will not generate any task. If u notice the mute reason will be written as OOTB record for those findings.

The reason why no task gets generated is because we don't usually modify any OOTB records as it is not a good practice.

Thanks,

Danish

[Mark Roethof]

Hi there,

Yes you can, though not with all types of Scan Checks.

Where do you need help with?

[Mark Roethof]

For example if just performing a basic Table Check with use of conditions, out-of-the-box untouched records won't be scanned. While with a Script Only Check, you can check out-of-the-box untouched records.

Again, if specific help needed, ask me. Do ask, since I see a lot of incorrect answers given in this thread 🙄