I am trying to create a query using the tables Server CI (CMDB Class), Remediation task and Vulnerability Item, and looking for an output with server name, OS, vulnerability item and remediation task number (VULXXX). I can create a relationship betwe...
What are the plugins usually needed to install for integration, testing, workspace access for a general Security Incident response module. And what are the steps need to involve for integrations, like importing information from an external third part...
Give me an overview what is Sighting Search and how to use it. Like i need the navigation to perform this sighting search.
Can someone explain how the calculators are working? And what are the types of calculators? When to use that respective type of calculator? My overview is like Calculators are mapped to a table and they will aggregate it for producing a respective sc...
Calculators helps to calculate the risk score calculation is it right? And if so, what are the severity calculator used for? What and see i could not catch this concept. Anybody explain this properly.
Hello, We have a requirement to allow more than one way of classification of VITs whereas ootb functionality picks the rule whichever matches first and ignores the rest. Currently, there is no OOTB Classification Type in sn_vul_vulnerable_item. We h...
What is Response Task? What is the purpose? For each and every SIR record a response task is generated or else it's a manual process to do so? And how to create response task manually?
Hii guys!!My doubt is what is the primary difference between Threat Intelligence and Enrichment. I know that Threat Intelligence is one of the type of Secops Component. And Enrichment is like to enchance the data's information. But what my thing is a...
What is the difference between the Flow Designer vs Process Automation Designer. Since PAD is developed with the help of the flow designer, what the speciality of PAD? When, How, Where this PAD is used. Is PAD is specifically avaliable only for the S...
Hi all! My question is like what the purpose of is using a Calculator. How to configure it? And my understanding is that it is used to prioritize the severe SI. But I need some more clarity in this topic. And what is the purpose of Group Calculator?T...
Hi All !! Can someone give me a clear view what are the concepts are important in SIR and I have an interview can someone provide the important topics which should need to more focused.Thanks in advance!
Major Security Incident Management: We are currently implementing Major Security Incident Management (MSIM) for a customer in the energy sector and are looking for guidance from others who have gone through the SharePoint integration setup — specif...
Hi, I am getting error below when running Vulnerability Response Integration with Tenable. My instance is on australia version Error: Invalid response code received from TenableSCPluginIntegration: 403. Access denied. You do not have permission to ac...
Hi Community, I'm currently working on setting up Qualys integration for Vulnerability Response following lab instructions.For some strange reason, integration job fails with error: "Cannot run REST-based integration without a Qualys API credential s...
Across the complete Vulnerability Response (VR) application, where can AI Agents be effectively implemented? Examples could include risk scoring, CI matching, assignment recommendations, remediation planning, vulnerability summarization, change autom...
