Hi Community, We recently noticed a change when adding attachments to the Incident (incident) and Security Incident (sn_si_incident) tables. A new option called Encrypt with Module (sn_si.security_incident_Crypto_module) is now available when uploadi...
We have an instance where our Assignment Rules have conditions that are dependent on our Classification Rules and it is either creating a Race Condition or I am simply too inexperienced to understand what is going wrong.Context:- 2 Classification Rul...
Hello SecOps Community, Currently for our Vulnerability management we are using third party vulnerability Tenable.sc. Our customer has asked me to build a dashboard using Performance analytics metrics to get the percentage count of the Scan integrity...
Hey There,Currently finishing up USEM upgrade and tweaking our Falcon Vulnerability intake from Crowdstrike.We would like to add Falcon EASM and needs some adivce on the setup.When I went to the Conenctor Configuration to enable the Falcon EASM it sa...
We wanted to show assessor and requestor in the list view of smart assessments but I can't find those fields in the record. How to achieve it?
I am working on the module and have a requirement where certain Vulnerable Items (VITs) should not reopen when new detections are received from the scanner (e.g., ).I understand that, out of the box, when a new detection matches an existing VIT (bas...
I'm trying to get an explanation why some of the data we are seeing on Vulnerable Items table is as it is. For example, when we look at the Vulnerable Items table, we see something like this: Look at the 3 right-most values (Assignment Group, Assi...
We’d love to learn more about your experience with ServiceNow SIR playbooks creation/maintenance in an upcoming one-on-one user research session! Session details: - Date: 14th July to 31st July Duration: 60 minutes Where: 1:1 Video Call What you’l...
Vulnerability Response (VR) is a beast of an application; comprising of 4 different apps in one: VR, Application Vulnerability Response (AVR), Container Vulnerability Response (CVR), and Configuration Compliance (CC). Some of these ties to VR are re...
HiThe documentation for this application seems to imply it might not be compatible with post USEM versions of VR, can someone tell me if it is? I am getting 404 errors on integrations associated with it Red Hat Solutions Integration (which I can't fi...
Is there a developer guide, or something similar, for developing a custom integration with the VR module? We are trying to import AWS Security Hub findings into the VR module and looking for a bit more guidance than the online docs can provide. It's ...
In Vulnerability Response, how do you manage the Unclassed Hardware [cmdb_ci_unclassed_hardware] table? In regards to VR integrations with third-party tools, ServiceNow automatically creates CIs on the Unclassed Hardware table when a CI is unmatched ...
I have put down my thoughts on how to handle Incomplete IP Identified Devices. I would like to hear your ideas on this topic. How is your organization handling them? (See Attachment)
i need to create playbook if security incident response record created based on condition like have category is policy violation i need to store in worknotes like kb article with the help of playbook ,
Hello, We're looking for guidance on how other organizations handle cross-functional work on Vulnerability Items (VITs) when SLA accountability remains with a single owning team.A VIT is assigned to and owned by a specific team with the remediation S...