Hi Experts,I need guidance on implementing a requirement related to remediation timelines in ServiceNow Vulnerability Response. RequirementThe client wants to pause the remediation target calculation when a record is in "In Review" state, and resume ...
Hi Experts,I would like to understand if there is any OOB or recommended custom integration approach in ServiceNow Security Operations to identify phishing emails from a shared/group mailbox.Scenario:The security team maintains a single shared mailbo...
In the Yokohama release, vulnerability solutions management had one schedule job (Process Vulnerability Solution Metrics Queue) When I upgraded to Australia, I see they have broken down the scheduled jobs Process Vulnerability Solution Metrics Queue...
Hi all, I'm trying to integrate Splunk ES with Servicenow. The objective is to let Splunk ES open SIR on SNow and, when the SIR is closed, let it know to Splunk ES. I'm basically following this guide: https://docs.servicenow.com/bundle/orlando-securi...
We have had some success with our Major Security Incident Management deployment and have been hoping to expand on the SharePoint Document Library and Team Chat Channel.Unfortunately, we have not been successful with our attempts after following the s...
Hi All, I need your help to enable encrypt with module on attachment, it's added for one of the table as attached in the screenshot. I need help in configuration of the same for other table. Please refer the screenshot. Thanks,Sayali
Hi All, We have created a Risk Calculator for Application Vulnerability Response, where in we have 4 calculator rules which is calculating the risk score. How to move this calculator rules to QA/Prod? Once I'm taking export, we are only getting the X...
Hi All,I have a requirement to exclude particular asset with asset tag name as ABC and id as 123. So, I gave tag_set_exclude as http parameter and tag ID in values. However, it doesn't work. so, by referring the articles I have added tag_exclude_sele...
Hi All,I’m facing an issue with the Qualys Host Detection integration in our environment and need some guidance on how to troubleshoot it.Example For the CI “abc 002”, a vulnerability with (Host Id) Source ID - 105025031 exists in Qualys — this has b...
Has anyone installed the new Wiz Vulnerability Response integration and uninstalled the old one ? we are seeing deprecated tables hanging around especially the Wiz details tab. looking to see what solutions were implemented
Hello,I am currently developing a custom integration between ServiceNow and SecurityScorecard to ingest vulnerability data.If you have experience with this specific implementation or have managed similar workflows, I would greatly appreciate any ins...
Hi community, I wanted to ask whether anyone has experience reopening a Security Incident Response (SIR) record and if so, how you approached it.I'm currently working on a UI Action to handle this, but even when I attempt to change the state programm...
Hi, We are working on Application Vulnerability Response. We have integrated a scanner which ingest application and vulnerability data. The AVIT is getting created successfully but the Risk Score field keeps toggling between High and Medium. I checke...
Hello, In Major Security Incident Management Workspace, we have status reports section on the incident. In any of the report template selected in Overview and activity sections there is an "Append text from last report shared" button visible and by c...
The Description field in the Remediation Task (recommended_field_remediation) is automatically populated by out-of-box (OOB) functionality with backend field names.Below is the example and I attached the screenshot:Following recommended fields are no...