Forum Posts
On closure of Policy Exception for VR
Hi All, When a Policy Exception expires, the related Vulnerable Item reopens along with associated Remediation Task. But my requirement is to keep the associated Remediation Task closed when Policy Exception expires. How to achieve this? Thanks!
Send Servicenow logs to Azure Sentinel (Cloud SIEM) using Kafka
Hello, I need to send ServiceNow's system & audit logs to a Azure Sentinel. What is the best approach?From the documentation (Log Export Service (LES) (servicenow.com)) it would seem to be to use Kafka cloud-to-cloud (at least for Splunk) but I can f...
Restrict Response Task on SIR
My use case is that I have to restrict record visibility on Response Task(sn_si_task). If my response task share common parent i.e SIR (sn_si_incident)then only make tasks visible to logged user who is also Assigned to user of the Response TasksFo...
ACL/role that provide read/create/delete access only to content items?
Hello!Is there a role or ACL that provides create/edit/read/delete rights on the table of content items, but not on catalog items at the same time? I am aware of the catalog_editor, catalog_manager and catalog_admin, none of these match the purpose. ...
What is the significance of "Import Since" date in the host detection integration in VR
Hello Everyone, I have a question regarding the "Import Since" field in the host detection integration on vulnerability response application. From the documentation, it seems that we can specify a date to import historical vulnerability information. ...
Turn off the Next Experience welcome screen after upgrading your instance
Turn off the Next Experience welcome screen after upgrading your instance
Questions on Restrict permissions for CMDB model hardening setting
Hello experts,While browsing and investigating on the security hardening settings, it seems that the 'Restrict Permissions for CMDB Model' security center hardening is compliant even though there is nothing configured to it. See below:When I also ver...
ACL not permitting user to see history List view on cases
I created an ACL on the sys_history_set table to allow users on our customer service team to have access for troubleshooting purposes. I created the ACL, along with updating the system property, adding a new role to be able to see the table. It initi...
Resolved! What is the external content metadata in the connect chat?
Hello experts, When checking on the hardening settings, I encountered this property glide.ui.url.external.content. When checking on that property it is described by this:"Enable Connect to retrieve external link metadata in order to render richer con...
Is there a report that shows ACL transaction and usage?
How can we show which of the ACL’s are used in system by the users?Is there a report that ServiceNow provides or need to be created manually?If the report needs to be created manually, what tables can we go to see the data for ACL usage by users?
How to limit vulnerability host scan from Qualys badsed on "Os Category" attribute of qualys?
We are in the process of initiating the Qualys integration to ServiceNow.What is the best practice approach to limit, or filter, income vulnerabilities based on Qualys attribute called "Os Category" which is equal to "server".In other words, lets say...
Security incident response (SIR) integration with Defender for endpoint key features
we are currently integrating our SIR with SIEM and we would like to utilize Defender for endpoint key features - Isolate host, Remove isolation, Restrict app execution, Run antivirus scan, Remove app restriction, and Stop and quarantine file. But In...
CompTIA CySA+ certification and ServiceNow SecOps
Community, I've been studying for Security+ for a while, but then I learned that there is a cousin to it: the Cybersecurity Analyst (CySA+) cert. Which, IMO, aligns almost perfectly with ServiceNow's SecOps offerings. CySA+ maybe does not have the "s...
🔐 SecOps Unleashed: The MITRE Att&ck x ServiceNow Saga- Part 1 🔐
INTRODUCTION: “Securing Dreams: MITRE Meets ServiceNow” In the world of cybersecurity, I wear two hats: one labeled "ServiceNow Enthusiast” and the other “Cyber Defender.” My job isn’t just about paychecks; it’s about turning my passion into acti...
