Resolved! DevSecOps
Hello, can someone share with me a link for training or guidance regarding DevSecOps? Thanks in advance.
Forum Posts
Resolved! How do i add the Vulnerability score (v4) to the VIT form
How do i add the Vulnerability score (v4) to the VIT form. I want this field to be populated from the NVD table if a value exist for each CVE, just as the V3 and V2 score. I am tempted to use a business rule but I am open to any ideas.
Risk Score Calculation from Vulnerability Calculators
Can we calculate risk score by having field value in range in risk calculator criteria and not exact value...likewise x field value is 0.8...so instead of that can we have the field value as 0.7-0.9...as such I am taking in range and it's not working...
Do you assign VITs to users, or only groups?
We received a request to allow users to use list_edit on the sn_vul_vulnerable item table, to bulk assign VIT to themselves. OOB there is an ACL that prevents ANYONE from using list_edit on the VIT table (and sn_vul_vulnerability VUL as well) ... whi...
Resolved! Matched Discovered Items have empty 'Matching type for the DI' field
We have Rapid7 integration setup for Vulnerability response. Many of the Discovered Items that have 'Matched' state has empty 'Matching type for the DI' field. How is this possible?Is this a known error or is this happening due to some gaps?
Resolved! Search directly for CVE’s with Tenable.sc plugin-based integration
Our VR integration is with tenable sc. The data comes in as tenable plugins (third party entries) We would like a way to search for CVEs without having to go through Tenable plugins (Third party Entries). This is really for reporting/ Performance Ana...
Rescan Vulnerability Subflows Shipped with VR
Summary: We recently implemented SecOps / Vulnerability Response integrated with our Tenable instance (working great!) Our Info Security teams run scans only once a month, so they remain static unless you click the ‘Rescan’ UI action from ServiceNow,...
Resolved! Tenable.sc Fixed Vulnerabilities Integration failing
We have configured Tenable.sc integration on our instance. All jobs are working fine except - Tenable.sc Fixed Vulnerabilities Integration.The job keeps on failing and we get below error. FYI, we don't want new items to be inserted for fixed vulnerab...
How to Clone a Widget to the Home Page on the ESC Portal?
Hi, I want to display the Software widget (currently available on a page) on the home page of the Employee Service Center (ESC) portal. Could someone guide me on how to clone or move this widget to the home page without breaking its functionality? Th...
Vulnerability Calculator
I am trying to use custom field as a target field in risk calculator and trying to implement using risk rule. But no data is being populated on custom field. Likewise, if we are using risk rule it populates risk score. So is there any way out to use ...
GlideAjax blocked from Script Include in same scope despite Isolate Script enabled
Hi all,I'm working within the Security Incident Response (SIR) application scope (sn_si) and trying to trigger a Script Include via a client-side UI Action using GlideAjax.The setup: The UI Action and Script Include are both in the sn_si scopeThe Scr...
Resolved! Contextual Knowledge Search for Security Incident Response
Hi, We need to implement the contextual knowledge search on security incidents and made changes to display relevant knowledge articles based on the short description of security incidents. We also need to ensure that previous similarly named security...
Resolved! Breakdowns for indicators
Dear friends, I run into a problem regarding breakdowns for automated indicators - performance analytics. In my case, I would like to get out of table: sn_si_incident the field: priority and state. However, I cannot chose these fields because they a...
Tenable.sc integration - reference data updates
Hi All, We have Tenable.sc integrated with ServiceNow using the ServiceNow integration application. I'm having trouble when the reference data in Tenable is updated but those updates are not received by ServiceNow. I'll illustrate with an example: B...
Resolved! Secure notes visibility configuration
Hi, Would anyone the best-practice way to configure the visibility and writeability of the Secure notes field on a Security Incident - (for example, configure the field so that only a Security Incident Analyst can write to the field, and allow a Secu...
