How send Post Incident Review for email ?
Hi Guys, I want to send the template html of the Post Incident Review (after complete) for email notifications, but I can't because ${templatescript: } don't work. What is the best way?
Forum Posts
vulnerability
how I can split SAST AND SCA projects or How I can make project name user friendly like prefix it with the asset ID AND project name
SIR -- Dynamic round robin incident assignment
Hello,I am trying to determine if a dynamic incident assignment is possible in the Security Incident Response (SIR) Module.by dynamic, I mean by using the current time and on-call member of an assignment group Here is the use case:During core busines...
Resolved! Where to view match percentage for VR starter story 'CI Matching - Unmatched CIs'
Starter Story order #16:CI Matching - Unmatched CIs DescriptionAs a Vulnerability Manager, I need the ability to review and adjust the baseline Lookup Rules in order to address items found in the Unmatched CI table. This allows me to analyze these re...
Resolved! Qualys INT. with ServiceNow via the Qualys Integration for Security Operations is throwing error
Hello community,RE: Qualys to ServiceNow Integration via the Qualys Integration for Security OperationsI'm getting an error for the 'Qualys Host List Integration' with the following error message: {"code":"1980","url":"https://qualysapi.qualys.com/a...
Security Vulnerability Notifications from SN
How can I receive automated notifications regarding security vulnerabilities from ServiceNow?
Vulnerability Response integration with two different Scanners.
Hello,Is it possible in the ServiceNow instance to integrate the Vulnerability Response module with two separate scanners (for example, Qualys and Wiz integration with VR)? Is there any standard connector to handle two scanners? Regards,Gaurav
Business rule is not triggering for new records in scoped application as vulnerability response.
Initial Condition for Business rule to trigger : (current.active == true && (current.cmdb_ci.changes() || current.source_risk_score.changes() || previous.active != true || ((new sn_vul.vulUtils())).shouldRefershRiskScore(current)))) Updated Conditio...
Will SIRs be restored when ServiceNow instance is disrupted
Hi,ServiceNow prod instance went down for a while. Does this kinds of disruption cause SIR to miss security incidents or do they get backlogged and generate when service is restored?
Vulnerability Manager Workspace - How to edit OOB view filters?
Hi Everyone, We are looking into the Vulnerability Manager Workspace and there are some pre-defined filters on the overview page.Is there a way for this filters to be updated?
OOB change request connection for application vulnerability response
Dear Community, Could you tell us if there is any plan to integrate Change request into the Application Vulnerability Response similar to the one we have in Vulnerability Response?
PDF exported via Email from a report
HI, I'm facing issue with export of pdf in reports , when I'm exporting from Report List "Right click" export -> pdf -> Landscapeit is sending mail of pdf attachment but fields and and column's available in that pdf are not the fields available in re...
How to avoid running assignment rules on closed VIs
Hi, After the vulnerable items are closed, something is triggering business rules that run assignment rules and setting the assignment group to empty on closed VIs. Our assignment rules are configured as follows:Discovered item.Resource Tag contains ...
Resolved! Vulnerability Response creating CI's of multiple classes.
Hey Folks, I'm hoping that the hive mind can help guide me a bit here. We have recently been reviewing records in the CMDB and have identified that the VR.System is creating thousands of CI's. My understanding was that, if the host that is imported f...
Which is eligible place in servicenow for onboarding responsible disclosures.
We are looking to onboard responsible disclosures to be created as a request in servicenow. Which is the right place to put this in servicenow. Can it be put into vulnerability management app. OR security incident request table (sn_si_request) ? If...