Hi All, I have configured Defender Field Translation for the Priority field, but the Security Incident priority is not being populated as expected. I have also added logs for debugging; however, the logs are not captured in the System Log table.Could...
Hi Community, I'm currently working on setting up Qualys integration for Vulnerability Response following lab instructions.For some strange reason, integration job fails with error: "Cannot run REST-based integration without a Qualys API credential s...
Across the complete Vulnerability Response (VR) application, where can AI Agents be effectively implemented? Examples could include risk scoring, CI matching, assignment recommendations, remediation planning, vulnerability summarization, change autom...
IntroductionIntegrating vulnerability scanners with ServiceNow Security Operations is often one of the first steps organizations take toward automating vulnerability management. While Rapid7 InsightVM provides robust vulnerability discovery capabilit...
We're currently working with the Rapid7 Vulnerability Management (VM) integration and have encountered several challenges related to remediation tracking and asset synchronization.Some of the issues we're seeing include:Inconsistencies between vulner...
We have identified a limitation in the out-of-the-box Tenable integration related to asset deletion handling.Current BehaviorThe Tenable integration imports asset and vulnerability data into ServiceNow.When vulnerabilities are no longer present for a...
Hi All, We have activated the Vulnerability Solutions Management plugin and are looking to import 'Solution' from Tenable.sc.I have gone through Tenable documentation but it seems like they do not follow the CSAF or CVRF schema for solutions. If anyo...
This is a purely theoretical question with simplified conditions. Setup:A third-party integration (say Qualys) brings in a discovered item (DI) with almost nothing in the source data, only a Qualys Host ID. Two CI lookup rules exist:Qualys Host ID (o...
Hello all!Hope you are good!I’m going to take the VR certification next week and I would like to ask for advice.I have about half a year in VR but OOTB functionalities only.I watched the course on SN university (taken notes, did the labs and so on) ,...
Hello Community,I'm looking for recommendations on the best way to limit the CIs discovered by the ServiceNow Vulnerability Response (VR) integration with Qualys based on a specific Qualys Tag.Our goal is to prevent assets associated with a particula...
If you're wondering how ServiceNow’s AI Control Tower can help you see every AI system you run, govern it with confidence, and prove its value, these three sessions will cover everything you need to know: AI Control Tower Early Implementation St...
Hello community, I'm currently implementing the Vulnerability Response Integration with Atlassian Jira integration for a customer. however I'm facing a rather bothering issue when it comes to state mapping. Within the ServiceNow platform, we have put...
I know this is a shot in the dark but I have inherited providing support when VUL tickets are assigned mostly when the VUL is assigned to a non-matching CI. Where do I start to reverse engineer? Thank you
Cloud CI look up rule is considering non ephemeral assets as ephemeral and pushing those CI's as virtual machine instance. How to restrict them in Cloud CI look up rule?
Where can one find information related to the Common Vulnerabilities and Exposures (CVE) and Common Weakness Enumeration (CWE)
