Checking to see if there is an architecture diagram for Security Operations that shows all applications for Security Incident Response, VR, Threat Management, Configuration Compliance and Trusted Security Circles.
Hello,We recently moved to use the Security Incident response module, and wanted to know if there is a way to edit the list of closure codes, specifically remove or hide some from the list. I have included a screenshot of the list of closure codes th...
I am trying to change the fields that are display in the details tab of a Security Incident (SIR record). The current fields in the details tab display values for: Priority Risk score State in that order. I am being asked by the Security Agents to c...
Hello SecOps Community, The ServiceNow VR team has run a very tight schedule of "VR success recommended practices" webinars in Q1. The feedback from participants has been very strongly positive and the majority asked for more. So, please find bel...
Hello,I've encountered the issue with the IT Remediation Workspace in my Customer DEV instance - UI Button "Create Change" is missing, though the roles are assigned properly.I can see the button on Remediation Task form, but on IT Remediation Workspa...
I wanted to drop a quick note on what not to do.... and what to do... A customer's imports were failing, and it was getting the error:"File size X MB exceeded the max size allowed...."I found KB0564441 in Support.servicenow.com:https://support.servic...
I can see risk score calculated for vulnerable items through risk calculator but how it is calculated for vul groups? There is no calculator for vul groups. Does it consider the risk scores for all associated Vul items? And how is the priority is set...
Hi, I am new to SIR and playbooks can you guys guide how can I create a playbook for Security incident response (phishing category) As mentioned below Security incident workspace there is any an option to add playbook how can i add playbook for that ...
Hello all, Ther "Success with Vulnerability Response" series of recommended practices deep-dive webinars continues. After the great feedback from the VR Performance, CI Matching and Assignment & Classification rules calls earlier this year, I am no...
Issue Facing : I am trying to make an option inactive present in "Request Exception" UI action present in Test Result Group form. The option comes in a dropdown after clicking Request Exception button named as False Positive. Steps Performed for dea...
Hi guys,I am using Vulnerability Response with integration with Tenable.I have a need to allow Vulnerability Analysts to tag a VIT/CI using the Security Tags functionality.That part is fine, I have configured the tags they want and they can go to a V...
Hi guys, TLDR: Mac Address CI Lookup Rule returning Network Adapter as CI to populate VIT's when it is meant to be the parent CI. I have integrated Vulnerability Response with Tenable and am having some issues with the CI Lookup Roles - specifically ...
Hi, we are currently in the process of implementing Prisma Cloud integration with Config Compliance. Seeing strange issues with Test Result Groups (TRGs). Throughout the course of the day, TRGs (Test Result Groups) are being deleted and created. Cons...
Dear All, Kindly note I've followed the below steps but still I'm unable to achieve my target to Allow Group Managers to Manage Group Members, even the admin is unable to edit the group members when we added " https://www.servicenowguru.com/system-de...
We are testing importing scan data from multiple sources ( Crowdstrike Spotlight and Tenable) into our Dev instance. Is there an easy way to see if any duplicate VITs are created for the same assets.The only way the documentation shows is using the w...