Hi Community, We are currently exploring on Application Vulnerability (AVR) in ServiceNow, and i have come across a scenario where need your help to understand it. When a vulnerability scanner (Veracode) identifies a new application vulnerability in ...
Hi Everyone, I was wondering, how to link daily extract of two reports to a SharePoint site. While scheduling the report, is there a way to configure to go to a SharePoint site? or Shared Drive? Any help would be greatly appreciated. Thank you
Hello Experts, I am using the below command from a unix machine. curl -v "https://<instancename>/api/now/table/incident?sysparm_query=assigned_to=aea28412db295704e744f1e51d96194c" --request GET --header "Accept:application/json" --header "X-userToken...
Has anyone successfully created a relationship between the vulnerabilities in the 'Vulnerable Items" table to an IT Portfolio (indirectly to the portfolio manager) without using Query Builder? If yes, could you please share how you went about doing t...
Hello Everyone, I have gone through one issue is that - There is a VIT which is created by VR System with assignment type as "manual" still the source is "Qualys" instead of "Manual". If the VIT is created manually then the source should be also manu...
When we stood up the Security Incident Response module, our request was that non-SOC members could not see the SIR, but could only be assigned SITs. Based on this, the appropriate groups were given the "response_task" Type and can be assigned tasks....
Hi, I have rolled out the first portion of the Microsoft Sentinel Integration (from ServiceNow store). I already have SIR +Secops and have done most of the mapping and config in SNOW. The issue I am having is that when polling for say 1m, I am pickin...
We have various VIT's (in the thousands) that were manually reassigned therefore the newly created assignment rules don't apply to them. However, we would like to know if there is a solution we can implement to get the assignment rules to apply, even...
Hi All,I'm creating playbooks to deal with Security Incident and Major Security Incident processes. One of my requests is to, based on conditions, trigger buttons either Promote Major Security Incident or Propose Major Security Incident directly from...
We're working on an exciting new feature: Automated Scheduling of Pentest Requests! Our goal is to streamline the process of requesting and scheduling penetration tests, making it quicker and easier for everyone involved and lower down the manual inp...
We're working on an exciting new feature: Automated Scheduling of Pentest Requests! Our goal is to streamline the process of requesting and scheduling penetration tests, making it quicker and easier for everyone involved and lower down the manual inp...
Hi Community,I'm currently working with the Security Incidents table (sn_si_incident) and have encountered an issue related to duration calculations.What I'm trying to do:Access the sn_si_incident tableFilter the list to show only closed incidentsDis...
Hi There, Just wanting some clarity around how vulnerability assignment rules are applied when a new VI is created. We currently have a few hundred vulnerability assignment rules configured because each technology type have different requirements for...