Playbook
i need to create playbook if security incident response record created based on condition like have category is policy violation i need to store in worknotes like kb article with the help of playbook ,
Forum Posts
Managing Cross-Functional Work for Vulnerability Items (VITs) Without Transferring SLA Ownership
Hello, We're looking for guidance on how other organizations handle cross-functional work on Vulnerability Items (VITs) when SLA accountability remains with a single owning team.A VIT is assigned to and owned by a specific team with the remediation S...
Wiz Integration – Clarification on last found not updating for active detections
Hi everyone,I’m currently facing an issue with the Wiz integration and would like to clarify how last found (mapped from lastDetectedAt) behaves, especially in relation to auto-closure rules. We have an auto-close rule that closes Vulnerable Items if...
VR/USEM Compensating Control OOTB hardcoded substate == '25' in SI ExceptionSettingsAJAX
Why Hardcoding substate == '25' in VR AJAX Logic "ExceptionSettingsAJAX" Is a Bad Practice OOTB Facts:1. As we know, selecting Mitigating Control (or substate 25) as a reason in "review_exception" UI Page as a reason, acts as a trigger for the defau...
End User - helpful upgrade Suggestions
Not sure this is the right place to submit a suggestion to developers to add fix/items to help EUE users workspaces Landing Page for tables in workspaces please add: a scroll bar at the top list table similar to the one at the bottom of the ...
Failed CI Matching Against Devices with Virtual Network Adapter Address
Hello, not sure if anyone has come across the following scenario: We're seeing a lot of "Unmatched" CI's in discovery, where matching fails using "Mac Address"(Configured as the 'primary' matching criteria) in our Microsoft TVM integration for ingest...
Unable to retrieve Tenable query filters
when trying to pull data from tenable.sc using servicenow integration, i get 403 error. While checking the setup assistant it is observed that the query filter is not working as expected. Any ideas on how to fix this issue? (bel Thanks
Pentesting workspace: what should we build next?
Over the past year, we've grown the Pentesting workspace in some big ways — adding MASVS support and the ability to upload manual findings directly into your workflow. Thank you to everyone whose feedback shaped those. Now we're looking ahead. Toda...
Document templates to generate PDF with images in HTML fields
Hello, We have created document templates and calling this API available OOTB to generate PDF out of the ticket.GenerateDocumentAPI().generateDocumentForTask We have a few HTML fields in the ticket where in the users insert tables/images, copy/paste ...
Preventing Platform Admins from accessing Major Security Incidents
I'm aware that in SIR we can isolate the admin role, which seems to work well. How are others managing the fact that users with admin role implicitly have access to Major Security Incidents? As there seems to be no ability to isolate the admin role l...
Best practice for routing OS vs. application vulnerabilities in ServiceNow VR (Defender + NVD / CVE
Hi community,we are currently implementing ServiceNow #Vulnerability Response and would like to get your input on a routing / assignment challenge. Our setupVulnerabilities are detected via Microsoft Defender and imported into VRAdditional enrichment...
Resolved! Rapid7 InsightVM asset import
We are trying to solve a problem with importing non-persistent VDI's (Workstations). Because we are required to install the Rapid7 agent on all workstations (mostly remote) and servers, I use the following site for asset import: - Rapid7 Insight Agen...
Shaping the future of SBOM Workspace — your input matters
When a new vulnerability emerges or even findings that come Mythos or any-other cyber model, every team faces the same question: are we affected, or not? How quickly and confidently you can answer that often determines everything that follows. SBO...
CRM EXECUTION PROCESS
BASED ON BANKING AND FINANCE CRM IMPLEMENTAION PROGRESS AND CHANGE IN HEALTH SECTORS
Avoiding single point of failure by creating a 'manager group'
Hi, We are planning to create a group access request that will have an approval step that requires the manager of a group to approve or reject the request before adding them to the group. Leadership has some concerns about there being a single point ...
