SecOps forum
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Forum Posts

SIR- CI enrichment Workflow Execution Issue

Hi Everyone, We have not enabled any capability related to CI enrichment but still I can see these workflow's automatically enabled and show-up in the work notes.Please find the screenshot below:Why this is getting enabled when there is no capability...

Venkatesh4_0-1754387728543.png
Venkatesh4 by Tera Expert
  • 368 Views
  • 1 replies
  • 0 helpfuls

Help with servicenow sign-in and audit-logs collection for IDTR use cases (detection and response)

Hello ServiceNow Community,Context – Security and Identity Threat DetectionI’m building a comprehensive Identity Threat Detection and Response (ITDR) process using ServiceNow’s core logs: sys_audit, sysevent, and syslog_transaction. The goal is to de...

Resolved! Remediation target rule with pause condition?

We are trying to use remediation target rules as a replacement for SLA's as we cannot use SLA's for Vulnerable item (sn_vul_vulnerable_item) records. Unfortunately these rules do not have a pause condition out of box as of Kingston patch 6 and this h...

find_real_file.png

Duplication Rule SecOps level

Hi everyone,I’ve been assigned a task to investigate what Duplication Rules entail within the Security Operations (SecOps) module. Could someone please provide more insight into how Duplication Rules work in this context?Is there any official trainin...

AndreeaI by Tera Contributor
  • 427 Views
  • 1 replies
  • 0 helpfuls

Resolved! In VR: When would you use SLAs rather than Remediation Targets

Hello, We have the API integration with Rapid 7's InsightVM and are ready to set timelines on vulnerability remediation. We have  4-5 tiers for remediation timelines and I'm trying to determine if we should use SLAs or Remediation Targets. It seems l...

LeslieC by Tera Expert
  • 2418 Views
  • 6 replies
  • 9 helpfuls