Interested in a ServiceNow event built for developers? Registration for now[dev]26 is officially open!
The message you are trying to access is permanently deleted.
Hello, we have a bunch of tenable plugins that were recast in tenable to a lower severity. None of these recasted severity values are reflected in ServiceNow, even though I see 'Recasted Severity'(true/false), 'Modified Severity', 'Severity' fields o...
Happy Friday SecOps community! We’re running a demo series next month showing how to actually consolidate your cybersecurity and risk tools and get ahead of the chaos. Five sessions, each one diving into different use cases across the cybersecur...
Hello Community, We created custom CI Lookup rules based on OOB. Just adding a query line and else loop with OOB script. There are many Unmatched CI & Unclassed Hardware records are created. Previously I thought that IRE got invoke based on custom CI...
Hello, I want to understand what exactly is the difference between the Third party vulnerability entries and NVD, what kind of data are stored, is Third party vulnerability is alternative to NVD? Or does it store the actual instance of Vulnerability ...
Hi all,I need to map the modified Severity field from our third-party vulnerability entries to a new custom field, u_risk_category. I'm seeking advice on the best table structure to use for this customization.Should the custom field be created on the...
Hi Team, I would like to understand that, how a Vulnerability is mapped or attached with the VIT ticket/on a CI, what process or rule make this happen? Regards,Abz
Hi team,I got inducted in SecOps with zero experience.My first task is to create incidents in the system when integration fails.Can you please help me.I was wondering maybe there is a process to create alert when integration fails and that alert can ...
Our SOC is using the Splunk SIEM known as Mission Control. All of their investigations into notable events are handled through the Splunk SIEM. However, we need to have the data sent to SIR so we can provide reports and metrics of their investigati...
When we setup VulnResp Management, our GRC module wasn't working the way we wanted. So we have exception management setup through VRM. When we migrated to USEM, we wanted to move our policy exception management to GRC. Unfortunately, I found for ...
What are the Key characterisitcs for Developing a SIR Team and what are the things can a SIR Team can do in the SIR Workspace. Give an overview on that topic.
Hello Experts! Not sure I'm posting this on the correct forum, but here goes. Who has some experience with integrating ServiceNow with Entra? We use Entra as our SSO provider, and have been given a requirement to allow the help desk to send a user an...
Hi everyone, I’m looking to connect with practitioners who have implemented or currently support Security Incident Response (SIR), especially in public-sector or large-enterprise environments. I’m looking to better understand the real-world experienc...
We have the Teams integration for MSIM.This works correctly to create the Teams and the Channels.However the Renew Subscription and Create Subscription Subflows are failing with Resource not found when the Scheduled Job tries to renew the Subscriptio...
All, I'm trying to figure out the best way to automate an as-built configuration report specifically for configurations done in USEM/VR. I envision this being a report out post-deployment that shows all configurations performed, users/roles created, ...
Hi all,We are currently implementing Vulnerability Response / USEM using the OOTB Tenable.sc integration and are seeing unexpected CI correlation behaviour.Environment:ServiceNow: AustraliaVulnerability Response Integration with Tenable: 30.5.3Tenabl...
