Security operations integration
Do we have an integration facility with MSFT Defender Attack Surface Manager? If yes, kindly share any documentation w.r.t integration procedures
Forum Posts
Resolved! Question about July 31 Transition for Wiz Built Store Apps (Based on Announcement Article)
[Article URL] https://www.servicenow.com/community/secops-articles/announcement-wiz-integration-with-servicenow-secops/ta-p/3325055 Hello, We are contacting you on behalf of our customer, who is reviewing the following community article:"Announceme...
Discovered items on CI Decommissioned VIts doesn't change when VIT is re-opened
Hi, We have some VIT records, where the DNS and CI name are different and when we try to apply the CI lookup rules, it doesn't get applied for those records since the Discovered items are CI Decommissioned and basically lookup rules do not apply on t...
Resolved! Information on _queryMatch
I am trying to understand exactly how _queryMatch works in the Lookup Rules. There is very little information other than the start of the default scripts.// _queryMatch function checks if the query returns 0, 1 or more than 1 CI. // it returns: // ...
Changed in the response task of assignment group field
Hi everyone we have one requirement in ServiceNow SIR workspace where we are wanted to the changes in response task the OOB behavior is that in response task the groups are available in assignment group field in response task are based on the group ...
Major security incident management
Hi Team, In MSIM there is a section called "Variables", may i know what the use of that section?
Resolved! Not able to install VR plugin in PDI
Hi CommunityI am trying to install VR plug in in my personal developer instance since the UI page for Developer Program changed recently i am not able to find VR plug in in the plug in LIST or application manager after the new UI servicenow is not al...
"Vulnerable item" table and Platform Analytics Dashboard
Hello All,I am trying to see how many vulnerabilities are there for each of the business units using a platform analytics dashboard. I have a simple platform analytics dashboard with two elements:Single score data visualization elementMultiple select...
CI lookup rules for VR
(function process(rule, sourceValue, sourcePayload) { /********************************* * CI Lookup Rule Script * * Available variables: * - sourceValue: The value of the source field from incoming data that is used for lookup * - rule: ...
Qualys Integration: Missing First Found/Last Found Dates on Vulnerable Items (VITs)
I am working on troubleshooting an issue where several Vulnerable Items (VITs) created from our Qualys integration are missing the First Found and Last Found date values. The VIT is created successfully, but these two date fields remain empty.For con...
Next version of the SIR Workspace: Opportunity to Provide Input
The Security Incident Response team is planning for SIR Workspace 2.0 to improve and streamline the workspace experience. To shape a smoother, more effective experience tailored to your needs, our UX team is gathering feedback directly from customers...
Resolved! How can I add multiple CIs to the Security Incident form in ServiceNow?
Hello Community, I need to associate multiple CIs with a single security incident record in the Security Incident Response application form. How can I achieve this?
Resolved! How to create reports for MTTR, TTR and Total time taken to close for vulnerable items
Hi. Is there a recipe to create MTTR dashboards for time taken to close vulnerable items, in the same way there is a recipe in your community article on how to create "Reports for MTTR, TTR and Total time taken to close for incident table"?
MTTR on closed vulnerable items CISA and known ransomware
Anyone has a recipe to calculate MTTR (Mean time to remediation) for vulnerable items that are tagged CISA or Ransomware?
