Hi everyone, I’m looking to connect with practitioners who have implemented or currently support Security Incident Response (SIR), especially in public-sector or large-enterprise environments. I’m looking to better understand the real-world experienc...
We have the Teams integration for MSIM.This works correctly to create the Teams and the Channels.However the Renew Subscription and Create Subscription Subflows are failing with Resource not found when the Scheduled Job tries to renew the Subscriptio...
Hi all, I am getting the error 'Read operation on table 'sn_si_calculator_group' from scope 'Security Support Common' was denied. The application 'Security Incident Response' must declare a Restricted Caller Access privilege. Please contact the appli...
Hi all, We created some vulnerable item exclusion rules, and it closed some and did not close others. the condition was simple. it was looking for some VITs where the vulnerability is XYZ. what could be the reason for some VITs not getting closed? t...
Hi all. We have implemented Vulnerability response for servers and the process as a whole is working great. However, from the reporting perspective, we are looking to get a little than what I think is offered out of box. Leadership would like to see ...
Hope this email finds you well.When entering time in the Time Cards module, I am no longer able to tab between fields to enter my hours. Previously, I could use the Tab key to move quickly from one field to the next, making time entry much more effic...
Hi Team,In a new PDI (no customizations), bulk edit option on VIT table in security exposure management workspace us not working.Even after selecting records , it shows " No records updated".how to solve this issue, why this issue is showing up in P...
Anyone else experiencing issues with security tag rules? running on the sn_vul_vulnerable_item table but only applying to a small percentage of matching records? We are using VR module but also testing USEM in DEV and security tagging is failing ther...
Hello Experts! Not sure I'm posting this on the correct forum, but here goes. Who has some experience with integrating ServiceNow with Entra? We use Entra as our SSO provider, and have been given a requirement to allow the help desk to send a user an...
The official documentation states that the relationship between a patch and a solution is established during the Patch record creation when the integration runs. Afterwards, only if the patch receives an update and is ingested again, the solution loo...
Hi all,Looking for advice from the community on handling recurring false positives in Vulnerability Response/USEM.Context:We're using ServiceNow Vulnerability Response / USEM (Australia Release) integrated with Qualys (Host Detection).Our team has id...
What are the Key characterisitcs for Developing a SIR Team and what are the things can a SIR Team can do in the SIR Workspace. Give an overview on that topic.
In-Depth Guide: Integrating ServiceNow with Qualys Integrating ServiceNow with Qualys can streamline your organization’s vulnerability management and incident response workflows. This comprehensive guide provides a step-by-step process to set up t...
I see that in a production instance, they have been using Archive Rules to clean out VITs closed over 90 days ago. As a result, the Archive Vulnerable Item table has compiled over 118 million records over a period of 14 months. I also do not see an...
Hello Everyone,Am trying to build a solution based approach for remediation task rules. Considering remediation notes is populating the solution for VIT's. When am trying to use recommend solution it gives 0 results after processing all the VIT's ass...
