Dear Experts, I am on a Orca Vul Response Security plugin 3.0.0, however it has been observed that the VIT are not displaying the discovered Items.. it has happening for a chunk of devices and I could see that there are CI matching rule issues. Howe...
Hi! We are using the Tenable plugin, and I'm trying to improve our CI lookup rule matching.Does anyone have an example where they scripted for when something matches on a specific class that it promotes to another class? Best example I can give, is t...
We just upgraded to VR version 15, where autoclose retired CIs is a checkbox, which we have checked. However, we changed some CIs to retired state and their vulnerable items have not closed after multiple days. Is there somewhere in VR we can look to...
I am testing our approval rules for VR and I am to the point where I am testing an extension of an exception. When I click the UI action to request an extension the Window opens for me to enter the date and reason but after I submit that nothing happ...
We have implemented EPSS for our vulnerability severity calculation and then apply remediation targets based on the calculated severity. What we are having some issues with is that when the EPSS scores are updated we are seeing some vulnerabilities j...
Hi,I'm currently facing a challenge in Vulnerability Response:A customer would like extend Risk Ratings for the Vulnerable Item table. The way they have currently set this up seems to clash with how VR is meant to work out-of-the-box. Can someone she...
Hello,I am having trouble executing exclusion rules.I followed the steps described in the official documentation to set up the rules.1. I defined the exclusion rule with the following criteria:Schwachstelle.Quellinstanz.Name=Tenable.sc and Schwachste...
Has anybody integrated with the European Union Vulnerability Database (EUVD) as an alternate to the US NVD repository given its uncertain funding future?
Hello all, We are trying to use document templates (sn_doc_template) to generate PDF document from Application vulnerable item (AVIT).looks like OOTB it is not available for this table (sn_vul_app_vulnerable_item). We are not using Remediation tasks ...
Hello Experts, My requirement is that on the SIR record there are few fields of type glide_duration and I have created a metric definition on SIR record which runs on state change and metric records are created in the metric instance table with multi...
Good morning, I am currently reviewing and preparing to implement the Security Customer Actions recommended for our instance. One item in particular—Enable 3DES Deprecation for Password2 Fields—has been reviewed multiple times by our internal team as...
Hi Community,I'm currently working on integrating Zscaler Web Access (ZWA) with ServiceNow and have a couple of questions around how ticket creation works out of the box and how to customize it.1. What is the default ticket type created when Zscaler ...
How do you not bring in autoscaling groups from wiz into servicenow ? we did not see an option to tweak the configuation in the configure option. Anyone have any ideas?
@chrismcdevi @tkrishna29 Vulnerable items in closed state are not re-open when the new detection is found against the same ci in Rapid7 integration. Even it matches the condition in "DetectionBase" script include to have the substate of "fixed" and...
we're using NeuVector for Container/Pod Scanning for Vulnerabilities. Is there an OOTB Box Integration available? If not, has anybody already integrated it? (Enterprise Integration | SUSE® Security 5.4)