when trying to pull data from tenable.sc using servicenow integration, i get 403 error. While checking the setup assistant it is observed that the query filter is not working as expected. Any ideas on how to fix this issue? (bel Thanks
Hello Forum, We're migrating the Qualys Vulnerability Integration (Qualys Integration for Security Operations) from Basic Auth to OAuth 2.0 on ServiceNow Zurich.Qualys's token endpoint (/auth/oidc) seems to require the credentials as two custom HTTP ...
Major Security Incident Management: We are currently implementing Major Security Incident Management (MSIM) for a customer in the energy sector and are looking for guidance from others who have gone through the SharePoint integration setup — specif...
Over the past year, we've grown the Pentesting workspace in some big ways — adding MASVS support and the ability to upload manual findings directly into your workflow. Thank you to everyone whose feedback shaped those. Now we're looking ahead. Toda...
Hi everyone,I’m currently facing an issue with the Wiz integration and would like to clarify how last found (mapped from lastDetectedAt) behaves, especially in relation to auto-closure rules. We have an auto-close rule that closes Vulnerable Items if...
Hello, We have created document templates and calling this API available OOTB to generate PDF out of the ticket.GenerateDocumentAPI().generateDocumentForTask We have a few HTML fields in the ticket where in the users insert tables/images, copy/paste ...
I'm aware that in SIR we can isolate the admin role, which seems to work well. How are others managing the fact that users with admin role implicitly have access to Major Security Incidents? As there seems to be no ability to isolate the admin role l...
Hi community,we are currently implementing ServiceNow #Vulnerability Response and would like to get your input on a routing / assignment challenge. Our setupVulnerabilities are detected via Microsoft Defender and imported into VRAdditional enrichment...
We are trying to solve a problem with importing non-persistent VDI's (Workstations). Because we are required to install the Rapid7 agent on all workstations (mostly remote) and servers, I use the following site for asset import: - Rapid7 Insight Agen...
Hey There,Currently finishing up USEM upgrade and tweaking our Falcon Vulnerability intake from Crowdstrike.We would like to add Falcon EASM and needs some adivce on the setup.When I went to the Conenctor Configuration to enable the Falcon EASM it sa...
When a new vulnerability emerges or even findings that come Mythos or any-other cyber model, every team faces the same question: are we affected, or not? How quickly and confidently you can answer that often determines everything that follows. SBO...
BASED ON BANKING AND FINANCE CRM IMPLEMENTAION PROGRESS AND CHANGE IN HEALTH SECTORS
Hi, We are planning to create a group access request that will have an approval step that requires the manager of a group to approve or reject the request before adding them to the group. Leadership has some concerns about there being a single point ...
Hi All,I have a requirement to allow two flows to run after Security Incident is Closed or Cancelled. Those flows are custom and are needed for integration with 3rd party system which will send our Closed and Cancel state to them. We have identified ...
Hi everyone,I'm currently an intern and have been asked to choose a ServiceNow domain to work in. Since I'm interested in cybersecurity and want to build my career in that direction, SecOps caught my attention.However, I'm a bit confused about what p...