Key Characteristics for Developing a SIR Team
What are the Key characterisitcs for Developing a SIR Team and what are the things can a SIR Team can do in the SIR Workspace. Give an overview on that topic.
Forum Posts
In-Depth Guide: Integrating ServiceNow with Qualys
In-Depth Guide: Integrating ServiceNow with Qualys Integrating ServiceNow with Qualys can streamline your organization’s vulnerability management and incident response workflows. This comprehensive guide provides a step-by-step process to set up t...
Best Practice for Flagging Recurring False Positive VITs by QID + CI (Qualys Integration)
Hi all,Looking for advice from the community on handling recurring false positives in Vulnerability Response/USEM.Context:We're using ServiceNow Vulnerability Response / USEM (Australia Release) integrated with Qualys (Host Detection).Our team has id...
Resolved! Auto-Delete Rules vs Archive Rules for VR
I see that in a production instance, they have been using Archive Rules to clean out VITs closed over 90 days ago. As a result, the Archive Vulnerable Item table has compiled over 118 million records over a period of 14 months. I also do not see an...
Resolved! What are the pre requisites required for recommend solution of Now Assist to be used.
Hello Everyone,Am trying to build a solution based approach for remediation task rules. Considering remediation notes is populating the solution for VIT's. When am trying to use recommend solution it gives 0 results after processing all the VIT's ass...
CMDB and Container Vunerability Response
How important is Container Inventory for the implementation of Container Vulnerabilities Response? If we are not discovering containers or have appropriate container information in the cmdb, how do we implement containers vulnerabilities, or should w...
Resolved! About CIS SIR Certification
HI! I am going to have my certification exam in CIS-SIR. I have read the concepts which are present in ebook. Is it enough to pass the exam? If possible provide some materials to cover and what are the topics are important and how will be the questio...
Respond action not working on Child Incidents in DLP IR Analyst Workspace
Hi ,I configured the Respond action to be available on child incidents in the DLP IR Analyst Workspace. The button is visible, and when I click it, the Accept/Reject response options are displayed correctly.However, after selecting either Accept or R...
Closed/False positive Vulnerable items changed to Closed/Stale
Anyone else seeing this issue? We marked the VIT state to closed/false positive by submitting the false positive request. After approval on example VCAXXXXXX, state of VIT changes to Closed and sub state to False Positive.Later VR.system updated the...
Resolved! Vulnerability query using, Vulnerable Item (VI), a Remediation Task, and Server Name
I am trying to create a query using the tables Server CI (CMDB Class), Remediation task and Vulnerability Item, and looking for an output with server name, OS, vulnerability item and remediation task number (VULXXX). I can create a relationship betwe...
Plugins for SIR
What are the plugins usually needed to install for integration, testing, workspace access for a general Security Incident response module. And what are the steps need to involve for integrations, like importing information from an external third part...
Sighting Search
Give me an overview what is Sighting Search and how to use it. Like i need the navigation to perform this sighting search.
Resolved! Security Incident Response Calculator Types
Can someone explain how the calculators are working? And what are the types of calculators? When to use that respective type of calculator? My overview is like Calculators are mapped to a table and they will aggregate it for producing a respective sc...
Resolved! Risk Score Calculation
Calculators helps to calculate the risk score calculation is it right? And if so, what are the severity calculator used for? What and see i could not catch this concept. Anybody explain this properly.
VRM Classification rules
Hello, We have a requirement to allow more than one way of classification of VITs whereas ootb functionality picks the rule whichever matches first and ignores the rest. Currently, there is no OOTB Classification Type in sn_vul_vulnerable_item. We h...
