How to implement a custom scanner integration for Vulnerability Response when there no OOB connector

[VenkateshS08928]

Hi Everyone,

We are building a custom integration for Vulnerability Response to ingest vulnerability findings from a scanner for which no out-of-box connector is available. Looking for guidance on the best implementation approach, including data ingestion, mapping to VR tables, handling normalization/classification, and any recommended best practices or lessons learned.

I know we can use the Vulnerability response integration framework but there is not enough information on the field mapping setup, transform map, post processing etc.

Any guidance, suggestions, or examples would be greatly appreciated.

Thanks in advance

[Eliz Skogquist]

Hi VenkateshS08928,
You can review this KB for more detailed steps on using the framework leveraging the Integration Assistant.  It includes update sets for you to start your work from simplifying your efforts further.  You will need to log in to Support to access this KB.

Best regards,

Elizabeth

[VenkateshS08928]

@Eliz Skogquist 

Thanks for sharing the KB article.
I tried downloading the Integration Assistant update set ZIP file, but it redirects me to the ServiceNow Now Support page (ServiceNow - Now Support).

Is there another way I can download it?

Also, the images in the KB article appear to be broken. Is there any way to access or obtain those images as well?

Thanks
Venkatesh S

[Tanushree Maiti]

Hi @VenkateshS08928 

Refer this : Vulnerability Response integrations 

                    Success with Vulnerability Response: Deep-dive into Classification Rules and Assignment Rules