SecOps forum
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Forum Posts

How to integrate Joe Sandbox with ServiceNow SIR?

Hello,We are currently exploring the possibility of integrating Joe Sandbox with ServiceNow Security Incident Response (SIR).Has anyone implemented this integration before, and could you share some guidance on how to set it up?Does ServiceNow provide...

AndreeaI by Tera Contributor
  • 710 Views
  • 1 replies
  • 1 helpfuls

Issue with CI Look up rules in vulnerability response

We have multiple CI look up rules in our instance in place. But the problem is if we have multiple CI's with same IP or some source field for a cloud Management agent class and Linux Server class then Discovered item is getting created for Cloud Mana...

Amarnadh by Tera Contributor
  • 464 Views
  • 1 replies
  • 0 helpfuls

Unified Security Exposure Management (VR) - Update Tracking

Hi all, during my first USEM project, I noticed that updates made in the new USEM Workspace are not automatically tracked in Update Sets (US), as all the new VR-related tables are not extended from "Application File". Does this mean that all updates ...

josdsi by Tera Contributor
  • 428 Views
  • 1 replies
  • 0 helpfuls

Execution configuration

Hi, there Im trying to configure my exception configuration but cant seem to find any questionnaire even after creating multiple questionnaire using the design questionnaire button, would really appreciate if anyone can point what im doing wrong here...

miteshwara_0-1777361154814.png miteshwara_1-1777361286247.png

Unable to setup Qualys WAS integration

Hi All, I am trying to setup "Qualys WAS Integration".Each time I click on the Qualys credentials module I am getting the below error error: Integration implementation not foundAny recommendation to fix this would help Thanks

Venkatesh4_0-1709565778143.png
Community Alums by Community Alums  
  • 585 Views
  • 1 replies
  • 0 helpfuls

Recommendation name is empty

For the CVEs listed under VREM0001430, there are active VITs associated with these CVEs, but the Recommendation field is empty. However, in Microsoft Defender for Endpoint (MDE), recommendations are clearly populated for the same CVEs.How can I fetch...

Resolved! Vulnerable Items (VITs) default state set to Deferred

We have tenable IO integration and all Vulnerable Items (VITs) created by integration or manually are set to default state as Deferred. Even reopen didnt work. I can see the reasons but no idea how it is setup. Its all OOB, no customization at all.  

AbdulKhan4_0-1776795907212.png

How to change or add condition on FQDN rule ?

I need to adjust the FQDN matching rule so that if the full FQDN does not match, it falls back to matching based on the hostname (without the domain).In some cases, the FQDN received from Tenable does not include the domain, whereas the existing CI i...