Is any other way to filter the endpoint alerts that come in so that security incidents are only created for certain alert types besides altering the scripts? Are there alert rules or something we can configure to get this to work without updating the...
Hello, We have configured Vulnerability Response and Tenable Integration with ServiceNow OOTB solution. There is a low-code Calculator that calculates priority based on conditions. We don't set "Critical" priority because of owner requirements. All w...
When AVIT is created from Invicti, the source severity was High. But then it shows user SecCommon System updated Risk Score and Risk Rating from High to Medium. When checked we could see changes in Vulnerability table sn_vul_app_vul_entry. It too sho...
Hi all,how is the risk rating field calculated in VR? any pointers on this please provide,Thanks in advance.
Hello Community,We are currently designing remediation task rules for Windows and RHEL OS patching in VR and are evaluating different grouping approaches (for example, by CVE, by asset, or by solution).We also have Vulnerability Solution Management e...
Hi Team, We are implementing Configuration compliance for our customer. we have an integration with third party scanner which brings in cloud misconfiguration and policy into ServiceNow. we have stuck at lookup rule to populate CI info at Test result...
Hi Team, in the Vulnerable item record the configuration item is wrongly mapped which is IP switch class. But actually, it should be mapped with the CI (Server class) in the detection record against the same VITs.
How to get demo data of OTVR in the demo instance including the vulnerability data and equipment model entities?
Hi Team , I'm facing an issue while using the Send Email activity in a Playbook(Process Automation Designer ) in ServiceNowWhenever I try to add custom text in the email body and then use the data pill picker to insert a field ( e.g. SIR Number) ,the...
Hi, I am trying to add the below two fields to our SIR workspace SIR form: Correlation IDExternal URL I have bee able to this this in the back end but I cannot see a view for SIR workspace for configure the layout in that view. Please can someone he...
Hi All,In Vulnerability Response Module, when I am creating remediation tasks with the button "Create Remediation Task" In workspace 'created by' field is showing "SecCommon.System" and not actual user who created the remediation task. Anyone have an...
Hello Everyone,I'm New to Penetration Testing in ServiceNow.I've gone through several Blogs, documents and Knowledge article but i like to know, how it works in practical.I have a Single Application "ABC Insur" it doesn't have any CI items it is a St...
Hi Team, We’re working on Application Vulnerability Response and have encountered an issue: when an AVIT is marked as Resolved or Closed by a user and later reopened either by the scanner or manually, the remediation target date does not update. Is t...
Hi Devs,How do we force the security incident response records to open in the Security Incident Response Workspace? I tried looking at the sys_navigator table and I cannot select the sn_si_incident table or the sn_si_task table.
Hi All, does anyone here have experience integrating CVR with Cortex. Specifically related to the link I have attached. Any help is greatly appreciated and thank you! https://www.paloaltonetworks.com/cortex/cloud/container-security