Internet Facing / Internet-Facing Attribute - what strategies exist to auto-populate? Anyone have a strategy on how to automatically populate the Internet Facing / Internet-Facing Attribute? IPAM data, Firewall data, some baseline Internet Assigned...
Hi all,I am not that familiar with Tags, but we wanted to identify Vulnerability records that are on the CISA Known Exploitable Vulnerability (KEV) Top 15 list. I figured if we could tag the 15 vulnerability records (easy), then it'd be simple to ide...
Hi Experts, I have a concern on closing the remediation tasks. A remediation task should be closed after all the related vulnerable items are closed. But, in this case whenever the State and Substate of vulnerable item goes to Closed-Cancelled, the S...
Hi, I need help!!! We are wanting to use the Create Change Request for Remediation Task, but we are having trouble. When we built out our Change Process, we reached out to ServiceNow as our company does Change Management a little different. Service...
Hello Everyone, I am new to ServiceNow Secops. I have a requirement to Create a Custom app and create a custom integration to import third-party Vulnerability scan results into ServiceNow as Vulnerability item. Here is the requirement. Create a custo...
Hi Commmunity, Has anyone setup integration with any of the below listed tools with SNOW Vulnerability Response module ?? Looking for suggestions, documentation, and/or any examples. If plugins are available for any of this tool under VR category ??...
Hi all - I need to set a static remediation target date for vulnerabilities published before a certain date. I have been using the 'last found' field to do this. I realized that creating target rules with the last found field will move the target eve...
Hi All,We are seeing this behavior where in we are closing all CTRs associated with a Specific CI : ABC and it gets reopned the next day. The CI is retired in CMDB_CI table and is removed from Qualys as well. >>where the CTR is assigned to ABC chang...
Hi Team, Do you guys know about Integration Assistance for VR and how does it help in case of a SecOps VR module?
Hi Community, I had posted a question: Solved: What differentiates Unmatched CIs from Unclassed C... - ServiceNow Community and @andy_ojha responded to my query. (The more you know - SecOps and CMDB Interactions - YouTube) and @andy_ojha's resp...
Hi,I am trying to create a new CI Lookup Rule [sn_sec_cmn_ci_lookup_rule]. In Source Field I can only give 1 key for which its value will come into script. But I want to take more than 1 value in the Discovered Item [sn_sec_cmn_src_ci] table from Sou...
@Ankur Bawiskar Could you please assist me on this?
Hi, We use Qualys scanners to scan our environment for vulnerabilities. We use both Qualys Virtual Appliance scanners and Qualys Cloud Agents installed locally on the servers. Attached is a diagram of an issue we are dealing with (all ips/servers/QI...
There are some relatively new OOB VR groups like 'CI Manager', 'Vulnerability and Configuration Manager' and few others. Also the OOB 'Vulnerability Admin' group has only one role sn_vul.vulnerability_admin although before it had many other roles. Do...
Hi,When i click on the Reapply button, the discovered items are getting matched with the CI’s belonging to Unclassed Hardware class. There are CIs available with the same name belonging to the Window server class.When ever I run the code for the FDQN...
