Vulnerability Response (VR) is a beast of an application; comprising of 4 different apps in one: VR, Application Vulnerability Response (AVR), Container Vulnerability Response (CVR), and Configuration Compliance (CC). Some of these ties to VR are re...
HiThe documentation for this application seems to imply it might not be compatible with post USEM versions of VR, can someone tell me if it is? I am getting 404 errors on integrations associated with it Red Hat Solutions Integration (which I can't fi...
Is there a developer guide, or something similar, for developing a custom integration with the VR module? We are trying to import AWS Security Hub findings into the VR module and looking for a bit more guidance than the online docs can provide. It's ...
Hi, I am getting error below when running Vulnerability Response Integration with Tenable. My instance is on australia version Error: Invalid response code received from TenableSCPluginIntegration: 403. Access denied. You do not have permission to ac...
In Vulnerability Response, how do you manage the Unclassed Hardware [cmdb_ci_unclassed_hardware] table? In regards to VR integrations with third-party tools, ServiceNow automatically creates CIs on the Unclassed Hardware table when a CI is unmatched ...
I have put down my thoughts on how to handle Incomplete IP Identified Devices. I would like to hear your ideas on this topic. How is your organization handling them? (See Attachment)
i need to create playbook if security incident response record created based on condition like have category is policy violation i need to store in worknotes like kb article with the help of playbook ,
Hello, We're looking for guidance on how other organizations handle cross-functional work on Vulnerability Items (VITs) when SLA accountability remains with a single owning team.A VIT is assigned to and owned by a specific team with the remediation S...
Hi everyone,I’m currently facing an issue with the Wiz integration and would like to clarify how last found (mapped from lastDetectedAt) behaves, especially in relation to auto-closure rules. We have an auto-close rule that closes Vulnerable Items if...
Why Hardcoding substate == '25' in VR AJAX Logic "ExceptionSettingsAJAX" Is a Bad Practice OOTB Facts:1. As we know, selecting Mitigating Control (or substate 25) as a reason in "review_exception" UI Page as a reason, acts as a trigger for the defau...
Hello Forum, We're migrating the Qualys Vulnerability Integration (Qualys Integration for Security Operations) from Basic Auth to OAuth 2.0 on ServiceNow Zurich.Qualys's token endpoint (/auth/oidc) seems to require the credentials as two custom HTTP ...
Not sure this is the right place to submit a suggestion to developers to add fix/items to help EUE users workspaces Landing Page for tables in workspaces please add: a scroll bar at the top list table similar to the one at the bottom of the ...
Hello, not sure if anyone has come across the following scenario: We're seeing a lot of "Unmatched" CI's in discovery, where matching fails using "Mac Address"(Configured as the 'primary' matching criteria) in our Microsoft TVM integration for ingest...
when trying to pull data from tenable.sc using servicenow integration, i get 403 error. While checking the setup assistant it is observed that the query filter is not working as expected. Any ideas on how to fix this issue? (bel Thanks
Major Security Incident Management: We are currently implementing Major Security Incident Management (MSIM) for a customer in the energy sector and are looking for guidance from others who have gone through the SharePoint integration setup — specif...