Hello Community, I am bit confused about the CI un-matching process in Vulnerability Response application. I already went through all the attached articles & ServiceNow community but could not figure out everything associated un-matching process of V...
Hi, Checking if risk score and risk rating of a specific vulnerability can be manually updated by VR Analysts?And if it can be updated, will it be overridden by Tenable integration (Tenable plugin integration that runs daily)?
When Remediation Task is resolved, all associated vulnerable items gets resolved (except closed and defered). I just curious to know which script is responsible for this functionality. Because i did not find any BR on "sn_vul_vulnerability" table for...
Hi All, I am trying to investigate and research Flexera Vulnerability management. Has anyone integrated or know about Flexera Vulnerability management with ServiceNow Vulnerability response? Is it a similar integration like Tenable.sc, MS-TVM, Orca e...
Hi All, I have two scenarios and wanted to know how the VR will will react to these scenarios 1. When a remediation task is marked as differed and the associated open vulnerability item is marked as deferred following exception approval, will that de...
Hi All,I want to understand how risk score is populated on Remediation task in Vulnerability response module. If there is any logic through which risk score is populated in remediation task then where can I customize it .Thanks in advance !@isaak_pap...
Hello,I'm searching the How the preferred solution is attached with the remediation Task form,The problem is it seems it not putting the latest one or If I want to verify its correct how I can do it?Can you help here?#Vulnerability #Response #Preferr...
How does "% VIs remediated " (percent_vi_complete) and "% VIs remediated "(percent_nd_vi_complete) gets value in "sn_vul_nvd_entry" table.
I am currently in the process of deploying VR for two separate clients. We have deployed the Vulnerability Solution Management Application as per our normal practice as both clients are entitled to the application. The issue here is that the "Microso...
Hi, We have a bunch of assignment rules configured on vulnerable items based on the values contained in resource tag field of discovered items table. How to re-run assignment rules on vulnerable items when resource tag on discovered item is updated?F...
Hi All, We need to whitelist few CI's in the vulnerability response application and the customer don't want to see any VIT or VUL record for the same. Is there is any system property or any other alternate mechanism available to achieve this in OOB? ...
Hi everyone. I need a layman's term understanding. I have watched videos, but it is not very clear. From Qualys, The system will search using QID in the Discovered Item table, if no record is found, it will invoke the CI Look up rule and then if it a...
Hello, I have checked the auto-close configuration to close the VIT's related to retired CI's.But the VIT's are not getting closed. I checked the scheduled job : Close detections/VIs for decommissioned CIs.In this the sn_vul_ci_di_manifest table does...
ServiceNow recently added the ability to separate out detections by proof into individual VI (https://docs.servicenow.com/bundle/vancouver-security-management/page/product/vulnerability-response/concept/add-proof-to-vi-key-rapid7.html). A classic exa...
I am wondering if anybody has used Qualys asset groups in the assignment rule conditions before, I'm trying to avoid using hundreds of IPs/ ranges in the conditions but I can't seem to dot walk to the asset groups.