Virus Total configuration issue

Sneh
Tera Contributor

Hello All,

I have configured Virus Total with service now using this link:

https://docs.servicenow.com/bundle/utah-security-management/page/product/secops-integration-threat/s...

 

As I don't received any error message while configuring this as all the workflows and Script include are present in my instance.

 

Now When I'm creating the observable and click on Run Threat Lookup nothing comes up. Please see below:

Sneh_0-1691743457989.png

 

 

I have already raise a case with Servicenow but no resolution on this as of now from their side.

 

One more thing, I would like to add here the Flow- Security Operations VirusTotal Integration V1 is not updated in the history and rest of the flows/workflows are triggering well.

 

Sneh_1-1691743678759.png

 

 

Can anyone help me here.

 

While associating the observables in SIR the Threat lookup results are preparing properly:

Sneh_2-1691743787214.png

 

Regards,

Sneha

2 REPLIES 2

Kireetivvs
ServiceNow Employee
ServiceNow Employee

Hello,

Assuming you have the 'sn_sec_cmn.read' role for your user, do you see the record with:

Table name: sn_sec_cmn_integration_capability_implementation

sysId: 534023890b333200263a089b37673afd

as 'Active=true' in your instance ?

Sneh
Tera Contributor

Sneh_0-1691766964460.png

Yes true