Can someone explain how the calculators are working? And what are the types of calculators? When to use that respective type of calculator? My overview is like Calculators are mapped to a table and they will aggregate it for producing a respective sc...
Calculators helps to calculate the risk score calculation is it right? And if so, what are the severity calculator used for? What and see i could not catch this concept. Anybody explain this properly.
Hello, We have a requirement to allow more than one way of classification of VITs whereas ootb functionality picks the rule whichever matches first and ignores the rest. Currently, there is no OOTB Classification Type in sn_vul_vulnerable_item. We h...
What is Response Task? What is the purpose? For each and every SIR record a response task is generated or else it's a manual process to do so? And how to create response task manually?
Hii guys!!My doubt is what is the primary difference between Threat Intelligence and Enrichment. I know that Threat Intelligence is one of the type of Secops Component. And Enrichment is like to enchance the data's information. But what my thing is a...
One of my observations is that a specific Exception Rule in ServiceNow Vulnerability Response was supposed to expire on 24 June 2025. However, a new Vulnerable Item (VIT1XXXXX) created this month still went into Deferred state, and it appears to hav...
What is the difference between the Flow Designer vs Process Automation Designer. Since PAD is developed with the help of the flow designer, what the speciality of PAD? When, How, Where this PAD is used. Is PAD is specifically avaliable only for the S...
Hi all! My question is like what the purpose of is using a Calculator. How to configure it? And my understanding is that it is used to prioritize the severe SI. But I need some more clarity in this topic. And what is the purpose of Group Calculator?T...
Hi All !! Can someone give me a clear view what are the concepts are important in SIR and I have an interview can someone provide the important topics which should need to more focused.Thanks in advance!
Major Security Incident Management: We are currently implementing Major Security Incident Management (MSIM) for a customer in the energy sector and are looking for guidance from others who have gone through the SharePoint integration setup — specif...
Hi, Tenable Integration on VR module is creating records on Unclassed Hardware table if it doesn't match with the existing CI.And those records come in with minimal information so when that same record is enriched in Tenable, will it be sent to Servi...
I am trying to Use background script, which is timing out after a while.The script I am using identifies Vulnerable Items (VITs) that are linked to more than one Vulnerability record through the sn_vul_m2m_vul_group_item table and prints the results...
Hi, I am getting error below when running Vulnerability Response Integration with Tenable. My instance is on australia version Error: Invalid response code received from TenableSCPluginIntegration: 403. Access denied. You do not have permission to ac...
Hi All, I have configured Defender Field Translation for the Priority field, but the Security Incident priority is not being populated as expected. I have also added logs for debugging; however, the logs are not captured in the System Log table.Could...
Hi Community, I'm currently working on setting up Qualys integration for Vulnerability Response following lab instructions.For some strange reason, integration job fails with error: "Cannot run REST-based integration without a Qualys API credential s...
