In this article I will walkthrough and example showing how Flow Designer subflows can be used to create custom REST API Threat Intel enrichments and execute them using a UI Action button. The end goal of this configuration is to have a ThreatGrid Loo...
Edit (5/25/2019): Almost all the installation steps mentioned in this article is no longer applicable as these steps are only applicable to the old version of the integration app developed by Rapid7. This version is discontinued in favour of a newer...
You can collect the RF threat feeds for Domains, IPs, File Hashes and URLs. 1. Define RF Rest Message (Recorded Future Taxii) method with Basic Auth Username = rf and Password = *RF API Key* 2. Create a Post Method(Default Post) , endpoint - https://...
Event Management Solution Brief Attached Please respond with any comments or suggestions. Feedback is greatly appreciated and helps to improve the content.
While not always something every team considers, the use of the platform-wide Email Client for Security Incident Response teams can be quite beneficial when configured properly. In the attached Solution Brief, myself and my associate Andy Ojha detai...
Vulnerability Response process is typically described as half automated and half manual as you can see in this schema: Let's focus on the manual part of the process, if you are interested in the automated part please click here
Read the Q&A below from this on demand webinar...Break free from your inefficient vendor risk management processes If you're not managing your vendor risk as part of your risk and security policy, it should be top of your list. If you do have a proce...
What is Security Operations? Security Operations is ServiceNow offering that helps security organizations deliver efficient security response, streamline remediation and visualize their security posture. It extends the workflow and systems management...
Security Operations Data Sheet
Sarah Wood
ServiceNow
LisaLatour
Eric Feron
Mary Hain
seanflack
Steph Morillo
