Hi! We are using the Tenable plugin, and I'm trying to improve our CI lookup rule matching.Does anyone have an example where they scripted for when something matches on a specific class that it promotes to another class? Best example I can give, is t...
I am trying to understand exactly how _queryMatch works in the Lookup Rules. There is very little information other than the start of the default scripts.// _queryMatch function checks if the query returns 0, 1 or more than 1 CI. // it returns: // ...
Hi everyone we have one requirement in ServiceNow SIR workspace where we are wanted to the changes in response task the OOB behavior is that in response task the groups are available in assignment group field in response task are based on the group ...
Hi Team, In MSIM there is a section called "Variables", may i know what the use of that section?
Hi CommunityI am trying to install VR plug in in my personal developer instance since the UI page for Developer Program changed recently i am not able to find VR plug in in the plug in LIST or application manager after the new UI servicenow is not al...
Hello All,I am trying to see how many vulnerabilities are there for each of the business units using a platform analytics dashboard. I have a simple platform analytics dashboard with two elements:Single score data visualization elementMultiple select...
(function process(rule, sourceValue, sourcePayload) { /********************************* * CI Lookup Rule Script * * Available variables: * - sourceValue: The value of the source field from incoming data that is used for lookup * - rule: ...
I am working on troubleshooting an issue where several Vulnerable Items (VITs) created from our Qualys integration are missing the First Found and Last Found date values. The VIT is created successfully, but these two date fields remain empty.For con...
The Security Incident Response team is planning for SIR Workspace 2.0 to improve and streamline the workspace experience. To shape a smoother, more effective experience tailored to your needs, our UX team is gathering feedback directly from customers...
Hello Community, I need to associate multiple CIs with a single security incident record in the Security Incident Response application form. How can I achieve this?
Hi. Is there a recipe to create MTTR dashboards for time taken to close vulnerable items, in the same way there is a recipe in your community article on how to create "Reports for MTTR, TTR and Total time taken to close for incident table"?
Anyone has a recipe to calculate MTTR (Mean time to remediation) for vulnerable items that are tagged CISA or Ransomware?
Hi all, I want to know how the "Secure Attachments" are managed on ServiceNow. Say we have a phishing email that got escalated to a security incident or the analyst wants to submit a malicious file to sandbox, is it safe to upload it in "Secure Attac...
Has anyone ever come up with a way to rollup up detections to a single VIT, regardless of scanning source? I've had SecOps people ask me, if the CVE and CI are the same, why can't I add the new detections to an existing VIT, regardless of who found i...
