Configurable options for Major security incident management

Hi there,   I'm currently evaluating MSI and have the following questions:   1.  Is it possible to add custom states to Major Security Incident Task [sn_msi_task]?  I've tried adding a new state; however, it seems like the Tasks board in MSI workspac...

Filtering vulnerable item based on assigned to or assignment group

User has sn_vul.read_all role. When the user accesses the sn_vul_vulnerable_item table, all vulnerabilities can be viewed (including those assigned to others). The requirement is to display only those vulnerable items that are assigned to users or gr...

Zscaler + ServiceNow integration. No way to track who initiated the request

Hi,   I was configuring the servicenow integration with zscaler using ootb store app. I was able to successfully setup the integration. The query i have is that I don't see anyway to track who requested the url blocking or removal. No fields on zscal...

Allowing Remediation Owner users to create their own custom VUL Remediation Tasks

Hey everybody.We are investigating the best way to allow a user with the Remediation Owner role to be able to create a custom Remediation Task without just opening everything up and giving everybody the write_all role.  Based on the ACLs and UI Butto...

Security Incident Closing - review response task - new status

Hi All,I created a new response task status  called "Not Applicable" that has to take in consideration when closing the related security incident.Actually, You can close a security incident only when all response tasks are completed but i want to clo...

Vulnerable Item State Approval workflow not working correct

Hello everyone,I have a requirement , to change the workflow of Vulnerable Item State Approval , when 1st approval is rejected , move to the next one and when approved just mark it as approved. I have inserted the logic and the scripts to populate th...

Approval is required on state change of Vulnerability Item from In review to Awating Implementation

There is a requirement - if user want to change the state of Vulnerable item (in sn_vul_vulnerable_item table) from In review to Awating Implementation, it should ask for approval from the support group of the asset. HIf any member of the support gro...

Playbook Activity Card

Does anyone perform the servcenow integration with microsoft defender

I want to know the whole process how to integrate servicenow with microsoft defender step by step if anyone works on it please let me know

Vulnerable Item state changed automatically by VR System user

Hi All,In our environment at below cases , the VR system changing the state of the VITs automatically:1. When the VITs are moved from deferred to open state it's getting reopened by the VR system user instead of the scanner , before the inbound to op...