I am testing our approval rules for VR and I am to the point where I am testing an extension of an exception. When I click the UI action to request an extension the Window opens for me to enter the date and reason but after I submit that nothing happ...
We have implemented EPSS for our vulnerability severity calculation and then apply remediation targets based on the calculated severity. What we are having some issues with is that when the EPSS scores are updated we are seeing some vulnerabilities j...
Hi,I'm currently facing a challenge in Vulnerability Response:A customer would like extend Risk Ratings for the Vulnerable Item table. The way they have currently set this up seems to clash with how VR is meant to work out-of-the-box. Can someone she...
Hello,I am having trouble executing exclusion rules.I followed the steps described in the official documentation to set up the rules.1. I defined the exclusion rule with the following criteria:Schwachstelle.Quellinstanz.Name=Tenable.sc and Schwachste...
Has anybody integrated with the European Union Vulnerability Database (EUVD) as an alternate to the US NVD repository given its uncertain funding future?
Hello all, We are trying to use document templates (sn_doc_template) to generate PDF document from Application vulnerable item (AVIT).looks like OOTB it is not available for this table (sn_vul_app_vulnerable_item). We are not using Remediation tasks ...
Hello Experts, My requirement is that on the SIR record there are few fields of type glide_duration and I have created a metric definition on SIR record which runs on state change and metric records are created in the metric instance table with multi...
Good morning, I am currently reviewing and preparing to implement the Security Customer Actions recommended for our instance. One item in particular—Enable 3DES Deprecation for Password2 Fields—has been reviewed multiple times by our internal team as...
Hi Community,I'm currently working on integrating Zscaler Web Access (ZWA) with ServiceNow and have a couple of questions around how ticket creation works out of the box and how to customize it.1. What is the default ticket type created when Zscaler ...
How do you not bring in autoscaling groups from wiz into servicenow ? we did not see an option to tweak the configuation in the configure option. Anyone have any ideas?
@chrismcdevi @tkrishna29 Vulnerable items in closed state are not re-open when the new detection is found against the same ci in Rapid7 integration. Even it matches the condition in "DetectionBase" script include to have the substate of "fixed" and...
we're using NeuVector for Container/Pod Scanning for Vulnerabilities. Is there an OOTB Box Integration available? If not, has anybody already integrated it? (Enterprise Integration | SUSE® Security 5.4)
Hi,I need help in removing demo data form the VR modules. I know the key tables and their related logic but there are 166 tables and its very tadious job. Note : Servicenow platform should build an inteligence to prevent loading any demo data in the...
Is any other way to filter the endpoint alerts that come in so that security incidents are only created for certain alert types besides altering the scripts? Are there alert rules or something we can configure to get this to work without updating the...
Hello, We have configured Vulnerability Response and Tenable Integration with ServiceNow OOTB solution. There is a low-code Calculator that calculates priority based on conditions. We don't set "Critical" priority because of owner requirements. All w...
