SecOps forum
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Forum Posts

How to integrate Joe Sandbox with ServiceNow SIR?

Hello,We are currently exploring the possibility of integrating Joe Sandbox with ServiceNow Security Incident Response (SIR).Has anyone implemented this integration before, and could you share some guidance on how to set it up?Does ServiceNow provide...

AndreeaI by Tera Contributor
  • 871 Views
  • 1 replies
  • 1 helpfuls

Issue with CI Look up rules in vulnerability response

We have multiple CI look up rules in our instance in place. But the problem is if we have multiple CI's with same IP or some source field for a cloud Management agent class and Linux Server class then Discovered item is getting created for Cloud Mana...

Amarnadh by Tera Contributor
  • 661 Views
  • 1 replies
  • 0 helpfuls

Unified Security Exposure Management (VR) - Update Tracking

Hi all, during my first USEM project, I noticed that updates made in the new USEM Workspace are not automatically tracked in Update Sets (US), as all the new VR-related tables are not extended from "Application File". Does this mean that all updates ...

josdsi by Tera Contributor
  • 699 Views
  • 1 replies
  • 0 helpfuls

Unable to setup Qualys WAS integration

Hi All, I am trying to setup "Qualys WAS Integration".Each time I click on the Qualys credentials module I am getting the below error error: Integration implementation not foundAny recommendation to fix this would help Thanks

Venkatesh4_0-1709565778143.png
Community Alums by Community Alums  
  • 660 Views
  • 1 replies
  • 0 helpfuls

Recommendation name is empty

For the CVEs listed under VREM0001430, there are active VITs associated with these CVEs, but the Recommendation field is empty. However, in Microsoft Defender for Endpoint (MDE), recommendations are clearly populated for the same CVEs.How can I fetch...

Australia and Rapid7 InsightAppSec Application VR Integration

Do you have Rapid7 InsightAppSec Application VR Integration installed?I confirmed with Rapid7 today that the current version is not compatible with the Platform release Australia.Rapid7 expressed that I needed to submit an enhancement request to them...

atariplayr by Tera Contributor
  • 794 Views
  • 2 replies
  • 0 helpfuls

Resolved! Vulnerable Items (VITs) default state set to Deferred

We have tenable IO integration and all Vulnerable Items (VITs) created by integration or manually are set to default state as Deferred. Even reopen didnt work. I can see the reasons but no idea how it is setup. Its all OOB, no customization at all.  

AbdulKhan4_0-1776795907212.png

How to change or add condition on FQDN rule ?

I need to adjust the FQDN matching rule so that if the full FQDN does not match, it falls back to matching based on the hostname (without the domain).In some cases, the FQDN received from Tenable does not include the domain, whereas the existing CI i...

How to update the FQDN rule ?

 FQDN Matching EnhancementI want to update the FQDN matching rule so it can handle variations where “.ad.” may or may not be present in the domain.For example, the rule should be able to match:server01.domain.comserver01.ad.domain.comeven if only one...