IntroductionIntegrating vulnerability scanners with ServiceNow Security Operations is often one of the first steps organizations take toward automating vulnerability management. While Rapid7 InsightVM provides robust vulnerability discovery capabilit...
We're currently working with the Rapid7 Vulnerability Management (VM) integration and have encountered several challenges related to remediation tracking and asset synchronization.Some of the issues we're seeing include:Inconsistencies between vulner...
We have identified a limitation in the out-of-the-box Tenable integration related to asset deletion handling.Current BehaviorThe Tenable integration imports asset and vulnerability data into ServiceNow.When vulnerabilities are no longer present for a...
Hi All, We have activated the Vulnerability Solutions Management plugin and are looking to import 'Solution' from Tenable.sc.I have gone through Tenable documentation but it seems like they do not follow the CSAF or CVRF schema for solutions. If anyo...
This is a purely theoretical question with simplified conditions. Setup:A third-party integration (say Qualys) brings in a discovered item (DI) with almost nothing in the source data, only a Qualys Host ID. Two CI lookup rules exist:Qualys Host ID (o...
Hello all!Hope you are good!I’m going to take the VR certification next week and I would like to ask for advice.I have about half a year in VR but OOTB functionalities only.I watched the course on SN university (taken notes, did the labs and so on) ,...
Hello Community,I'm looking for recommendations on the best way to limit the CIs discovered by the ServiceNow Vulnerability Response (VR) integration with Qualys based on a specific Qualys Tag.Our goal is to prevent assets associated with a particula...
If you're wondering how ServiceNow’s AI Control Tower can help you see every AI system you run, govern it with confidence, and prove its value, these three sessions will cover everything you need to know: AI Control Tower Early Implementation St...
I know this is a shot in the dark but I have inherited providing support when VUL tickets are assigned mostly when the VUL is assigned to a non-matching CI. Where do I start to reverse engineer? Thank you
Cloud CI look up rule is considering non ephemeral assets as ephemeral and pushing those CI's as virtual machine instance. How to restrict them in Cloud CI look up rule?
Where can one find information related to the Common Vulnerabilities and Exposures (CVE) and Common Weakness Enumeration (CWE)
Hello Everyone, I am currently reviewing the documentation for the Vulnerability Response Integration with Wiz application and noticed that it mentions the following integration processes under Integration Processes Configuration:Wiz Fetch Vulnerabil...
The refresh rate for the reporting widgets in this operational dashboard is either daily or an on demand refresh. This is insufficient for operational purposes, is daily a performance limitation. Could this be reduced to hourly as a customization wi...
Using OOB Update Record activity in Playbook Designer on Security Incident (Zurich). String fields work, but Choice field (State) only accepts internal value not display value, and Reference field (Assignment Group) clears the sys_id right after past...
Hi all, We have a non-ServiceNow GRC application that handles policy exceptions and garners business risk acceptance. When risk acceptance has been gained in the external system for exceptions to vulnerability or lifecycle policies (i.e. upgrading EO...
