Sighting Search
Give me an overview what is Sighting Search and how to use it. Like i need the navigation to perform this sighting search.
Forum Posts
Resolved! Security Incident Response Calculator Types
Can someone explain how the calculators are working? And what are the types of calculators? When to use that respective type of calculator? My overview is like Calculators are mapped to a table and they will aggregate it for producing a respective sc...
Resolved! Risk Score Calculation
Calculators helps to calculate the risk score calculation is it right? And if so, what are the severity calculator used for? What and see i could not catch this concept. Anybody explain this properly.
VRM Classification rules
Hello, We have a requirement to allow more than one way of classification of VITs whereas ootb functionality picks the rule whichever matches first and ignores the rest. Currently, there is no OOTB Classification Type in sn_vul_vulnerable_item. We h...
Resolved! Response Task for SIR
What is Response Task? What is the purpose? For each and every SIR record a response task is generated or else it's a manual process to do so? And how to create response task manually?
Resolved! Threat Intelligence vs Enrichment of an SIR
Hii guys!!My doubt is what is the primary difference between Threat Intelligence and Enrichment. I know that Threat Intelligence is one of the type of Secops Component. And Enrichment is like to enchance the data's information. But what my thing is a...
Exception rules in Vulnerabiltiy management
One of my observations is that a specific Exception Rule in ServiceNow Vulnerability Response was supposed to expire on 24 June 2025. However, a new Vulnerable Item (VIT1XXXXX) created this month still went into Deferred state, and it appears to hav...
Resolved! Security Incident Management
What is the difference between the Flow Designer vs Process Automation Designer. Since PAD is developed with the help of the flow designer, what the speciality of PAD? When, How, Where this PAD is used. Is PAD is specifically avaliable only for the S...
Resolved! Calculators in SIR
Hi all! My question is like what the purpose of is using a Calculator. How to configure it? And my understanding is that it is used to prioritize the severe SI. But I need some more clarity in this topic. And what is the purpose of Group Calculator?T...
Security Incident Response
Hi All !! Can someone give me a clear view what are the concepts are important in SIR and I have an interview can someone provide the important topics which should need to more focused.Thanks in advance!
Major Security Incident Management
Major Security Incident Management: We are currently implementing Major Security Incident Management (MSIM) for a customer in the energy sector and are looking for guidance from others who have gone through the SharePoint integration setup — specif...
VR: Tenable Integration creating assets in Unclassed Hardware
Hi, Tenable Integration on VR module is creating records on Unclassed Hardware table if it doesn't match with the existing CI.And those records come in with minimal information so when that same record is enriched in Tenable, will it be sent to Servi...
Generate Report on VITs part of multiple Remediation Tasks VULs
I am trying to Use background script, which is timing out after a while.The script I am using identifies Vulnerable Items (VITs) that are linked to more than one Vulnerability record through the sn_vul_m2m_vul_group_item table and prints the results...
Resolved! TenableSCPluginIntegration:
Hi, I am getting error below when running Vulnerability Response Integration with Tenable. My instance is on australia version Error: Invalid response code received from TenableSCPluginIntegration: 403. Access denied. You do not have permission to ac...
Priority Values mapping issue in Security Incident Response
Hi All, I have configured Defender Field Translation for the Priority field, but the Security Incident priority is not being populated as expected. I have also added logs for debugging; however, the logs are not captured in the System Log table.Could...
