I need the value in Approval For field because i have to send notification to the assignment group for Vulnerable Item & Remediation Task requested, approved & reject for Exception request.
Hi all, I would like to enable the export feature that can be found on the SIR workspace, both via the homepage and list view, users have a 'Export' UI action (this appears to be the same functionality as right-clicking on the form header > export > ...
I am considering activating Flow Designer in our Vulnerability Response application.We have only a couple of workflows created historically. Does activating Flow Designer in VR have any adverse effects on current Workflows created? Or is there a mi...
Hi Everyone! Currently when we manually upload Vulnerabilities to create VITs users do not get notified when they are uploaded. I'm trying to figure out the best way to configure an email to be sent to notify users that they need to address this asa...
i need to create SIR Integration group so which roles are suitable for this group can you please suggest me
This is the remediation task rule that is configured in the configuration compliance remediation task rules table (sn_vulc_grouping_rule).What I want is to create remediation task based on the condition that if any of the Test Result is created with ...
Hello all, I just wanted to know if I can set new line "\n" as a delimiter for Splunk ES field mapping. If I do comma separation, the data looks quite shabby, as I'm trying to populate the description field with 8-9 fields. I tried putting "\n" in t...
Hi everyone,I've encountered an issue where some Vulnerability Remediation (VUL) tasks or remediation tasks remain open, despite their associated Vulnerable Items (VITs) being 100% closed. Can anyone help me understand why this discrepancy occurs, an...
Hello All,I'm facing an issue while integrating CrowdStrike Falcon Sandbox with ServiceNow Security Operations. When submitting a URL for malware analysis, I receive the following Error: 'access denied, authorization failed' occurred while submittin...
Hello everyone, I’m looking to set up a fast-track solution for managing critical CVEs (Common Vulnerabilities and Exposures) that require immediate attention. Here’s a brief overview of what I’m aiming to achieve:Ad Hoc Remediation Targets:I need a ...
Hi All,I need an information regarding cancellation reason of playbook in SIR.On which table the cancellation reason of playbook in security incident is stored in ServiceNow?Thanks,Kushal
Context:In the Application Vulnerability Response plugin, we are working with a vendor that doesn't have an integration, so we've built import sets to import the data. Issue:We aren't able to run the Assignment rules on Closed or Active = false vulne...
I have installed the Threat Intelligence Security Center app, and am working in the integrations view to get threat feeds from MITRE. In the docs, it looks like you need the sn_sec_tisc.admin role, which I have granted myself. From the docs, it als...
Hi Everyone, What happens to a CI when it is not discovered for 60 days? Any OOB scheduled job will run and change its state? Without any configuration? Something from OOB? Thanks!
I'm trying to understand how the Remediation Status is affected for Vulnerable Items (VIT) that are placed in a deferral status.If the Vulnerable Item has a Remediation Status of "Approaching Target" and then the VIT is deferred, does the status rema...