Feldzuordnung für Wiz Vulnerability Response-Integrationen
Überprüfen Sie Quell- und Zielfelder, und zeigen Sie importierte Daten zu Tabellen und Datensätzen in Ihrem an ServiceNow KI-Instanz der Now Platform.
Feldzuordnung für Host-Schwachstellenintegration
| Wiz Feld | ServiceNow Tabellenspalte | ServiceNow Feldspalte |
|---|---|---|
| Beschreibung | sn_vul_Detection | Nachweis |
| status | sn_vul_Detection | Source_Status |
| LastDetectedAt | sn_vul_Detection | Last_found |
| ErstDetectedAt | sn_vul_Detection | first_found |
| vulnerableAsset.name | sn_vul_Detection | dns |
| Korrektur | sn_vul_Detection | Solution_Summary |
| Angreifbares Asset.ipAddresses[0] | sn_vul_Detection | ip_address |
| VendorSchweregrad | sn_vul_Detection | Source_severity |
| Fixierte Version | sn_vul_Detection | Fixed_Version |
| status | sn_vul_Detection | Ist_ignoriert |
| status | sn_vul_Detection | status |
| name | sn_vul_nvd_entry | id |
| Punktzahl | sn_vul_nvd_entry | V3_Base_Score |
| CVEBeschreibung | sn_vul_nvd_entry | Zusammenfassung |
| VendorSchweregrad | sn_vul_nvd_entry | Source_severity |
| Cvssv3.attackVector | sn_vul_nvd_entry | V3_Attack_Vector |
| Cvssv3.attackComplexity | sn_vul_nvd_entry | V3_Attack_Complex |
| Cvssv3.VertraulichkeitImpact | sn_vul_nvd_entry | V3_Vertraulichkeit_Auswirkung |
| Cvssv3.privilegesRequired | sn_vul_nvd_entry | V3_Privilegien_erforderlich |
| cvssv3.integrityImpact | sn_vul_nvd_entry | V3_Integrity_Impact |
| cvssv3.userInteractionRequired | sn_vul_nvd_entry | V3_user_Interaction |
| HasExploit | sn_vul_nvd_entry | Exploit |
| HasCisaKevExploit | sn_vul_nvd_entry | cisa_exists |
| SchwachstellenAsset.Tags | sn_sec_cmn_src_ci | Host_Tag |
| vulnerableAsset.id | sn_sec_cmn_src_ci | source_id |
| vulnerableAsset.name | sn_sec_cmn_src_ci | name |
| SchwachstellenAsset.Region | sn_sec_cmn_src_ci | Cloud_Region |
| vulnerableAsset.providerUniqueId | sn_sec_cmn_src_ci | resource_id |
| SchwachstellenAsset.cloudPlatform | sn_sec_cmn_src_ci | Cloud_Service_Provider |
| SchwachstellenAsset.Typ | sn_sec_cmn_src_ci | assetType |
| ZugehörigIssueAnalytics | sn_sec_cmn_src_ci | Source_Data |
| SchwachstellenAsset.nativeType | sn_sec_cmn_src_ci | Cloud_resource_type |
| SchwachleAsset.subscriptionExternalId | sn_sec_cmn_src_ci | cloud_account |
| vulnerableAsset.name | sn_sec_cmn_src_ci | resource_name |
| SchwachstellenAsset.ImageName | sn_sec_cmn_src_ci | image_id |
| Angreifbares Asset.* | sn_sec_cmn_src_ci | Source_Data |
| LastDetectedAt | sn_sec_cmn_src_ci | Source_Data |
Feldzuordnung für Container-Schwachstellenintegration
| Wiz Feld | ServiceNow Tabellenspalte | ServiceNow Feldspalte |
|---|---|---|
| imageID | sn_vul_Container_image | image_id |
| vulnerableAsset.name | sn_vul_Container_image | image_name |
| SchwachstellenAsset.Repository.externalId nach ## | sn_vul_Container_image | Registrierung |
| SchwachstellenAsset.Repository.externalId vor ## | sn_vul_Container_image | Repository |
| SchwachstellenAsset.Tags | sn_vul_Container_image | Image_Bezeichnungen |
| Projekte | sn_vul_Container_image | Image_Projects |
| SchwachstellenAsset.Region | sn_vul_Container_image | Cloud_Regions |
| SchwachstellenAsset.cloudPlatform | sn_vul_Container_image | Cloud_Provider |
| SchwachleAsset.subscriptionExternalId | sn_vul_Container_image | Cloud_Account_IDs |
| vulnerableAsset.executionControllers.ancestors.name | sn_vul_Container_image | Image_Namespace |
| vulnerableAsset.executionControllers.ancestors.name | sn_vul_Container_image | Image_Cluster |
| vulnerableAsset.executionControllers.ancestors.name | sn_vul_Container_image_vulnerable_item | Image_Cluster |
| vulnerableAsset.executionControllers.ancestors.name | sn_vul_Container_image_vulnerable_item | Image_Namespace |
| SchwachstellenAsset.Repository.externalId vor ## | sn_vul_Container_image_vulnerable_item | Image_Repository |
| LayerMetadaten.isBaseLayer | sn_vul_Container_image_results | Ist_Base_image |
| ErstDetectedAt | sn_vul_Container_image_results | first_found |
| LastDetectedAt | sn_vul_Container_image_results | Last_found |
| DetailedName | sn_vul_Container_image_Package | name |
| Version | sn_vul_Container_image_Package | Version |
| LocationPath | sn_vul_Container_image_Package | path |
| name | sn_vul_nvd_entry | id |
| Punktzahl | sn_vul_nvd_entry | V3_Base_Score |
| CVEBeschreibung | sn_vul_nvd_entry | Zusammenfassung |
| Vendorschweregrad | sn_vul_nvd_entry | Source_severity |
| Cvssv3.attackVector | sn_vul_nvd_entry | V3_Attack_Vector |
| Cvssv3.attackComplexity | sn_vul_nvd_entry | V3_Attack_Complex |
| Cvssv3.VertraulichkeitImpact | sn_vul_nvd_entry | V3_Vertraulichkeit_Auswirkung |
| Cvssv3.privilegesRequired | sn_vul_nvd_entry | V3_Privilegien_erforderlich |
| cvssv3.integrityImpact | sn_vul_nvd_entry | V3_Integrity_Impact |
| cvssv3.userInteractionRequired | sn_vul_nvd_entry | V3_user_Interaction |
| HasExploit | sn_vul_nvd_entry | HasExploit |
| LayerMetadaten.isBaseLayer | sn_vul_Container_image_Layer | Basisebene |
| layerMetadata.details | sn_vul_Container_image_Layer | Anweisung |
| layerMetadata.id | sn_vul_Container_image_Layer | id |
| status | sn_vul_Container_image_results | Ist_ignoriert |
| Validieren_at_Runtime | sn_vul_Container_image_results | Validieren_at_Runtime |
| id | sn_vul_Container_image_results | Unique_key |
Konfigurations-Compliance Zuordnung des Integrationsfelds für Testergebnisse
| Wiz Feld | ServiceNow Tabellenspalte | ServiceNow Feldspalte |
|---|---|---|
| Regel.ID | sn_vulc_Test | source_id |
| rule.name | sn_vulc_Test | short_description |
| Regel.Korrekturanweisungen | sn_vulc_Test | Korrektur |
| rule.description | sn_vulc_Test | Beschreibung |
| severity | sn_vulc_Test | Source_Relevanz |
| status | sn_vulc_result | Ergebnis |
| id | sn_vulc_result | source_id |
| Analysiert At | sn_vulc_result | last_seen |
| Erstes SeenAt | sn_vulc_result | first_seen |
| Regel.Korrekturanweisungen | sn_vulc_result | Korrektur |
| Resource.nativeType | sn_sec_cmn_src_ci | Source_Data |
| Resource.type | sn_sec_cmn_src_ci | Source_Data |
| id | sn_vulc_result | Beschreibung |
| id | sn_vulc_result | source_id |
| securitySubCategories.category.framework.id | sn_vulc_auth_src | source_id |
| securitySubCategories.category.framework.name | sn_vulc_auth_src | short_description |
| securitySubCategories.category.framework.description | sn_vulc_auth_src | Beschreibung |
| securitySubCategories.id | sn_vulc_Zitat | Abschnitt |
| Sicherheitsunterkategorien.Titel | sn_vulc_Zitat | Abschnittsname |
| resource.projects | sn_sec_cmn_src_ci | Projekte |
| status | sn_vulc_result | Ist_ignoriert |
Probleme bei der Integration der Feldzuordnung
Hinweis:
Daten, die für die Ergebnisse von Problemintegration zu Cloud-Tests (CTRs) zugeordnet sind, werden mit gekennzeichnet Wiz-Probleme Als Quelle, die Ihnen hilft, diese CTRs von den Testergebnisintegrations-CTRs zu unterscheiden.
| Wiz Feld | ServiceNow Tabellenspalte | ServiceNow Feldspalte |
|---|---|---|
| sourceRule.id | sn_vulc_Test | source_id |
| sourceRule.name | sn_vulc_Test | short_description |
| SourceRule.resolutionRecommendation/sourceRule.RemediationInstructions | sn_vulc_Test | Korrektur |
| sourceRule.description | sn_vulc_Test | Beschreibung |
| severity | sn_vulc_Test | Source_Relevanz |
| createdAt | sn_vulc_result | first_seen |
| updatedAt | sn_vulc_result | last_seen |
| status | sn_vulc_result | Ergebnis |
| id | sn_vulc_result | source_id |
| SourceRule.resolutionRecommendation/sourceRule.RemediationInstructions | sn_vulc_result | Korrektur |
| SourceRule.controlDescription | sn_vulc_result | Beschreibung |
| EntitySnapshot.nativeType | sn_sec_cmn_src_ci | Source_Data |
| EntitySnapshot.type | sn_sec_cmn_src_ci | Source_Data |
| Wiz-Problem“ | sn_vulc_result | result_type |
| id | sn_vulc_result | Beschreibung |
| severity | sn_vulc_Test | Source_Relevanz |
| id | sn_vulc_result | source_id |
| sourcerule.securitySubCategories.category.framework.id | sn_vulc_auth_src | source_id |
| sourcerule.securitySubCategories.category.framework.name | sn_vulc_auth_src | short_description |
| sourcerule.securitySubCategories.category.framework.description | sn_vulc_auth_src | Beschreibung |
| sourcerule.securitySubCategories.id | sn_vulc_Zitat | Abschnitt |
| sourcerule.securitySubCategories.title | sn_vulc_Zitat | Abschnittsname |
| Projekte | sn_sec_cmn_src_ci | Projekte |
| status | sn_vulc_result | Ist_ignoriert |
Zuordnung zu angreifbaren Elementen und Testergebnisdatensätzen
- Ergebnisse der Host-Schwachstellen werden angreifbaren Host-Elementen (Vits) zugeordnet.
- Container-Schwachstellen-Ergebnisse werden angreifbaren Container-Elementen (CVITs) zugeordnet.
- Konfigurationstestergebnisse werden Cloud-Testergebnisdatensätzen (CTRs) in zugeordnet Konfigurations-Compliance Anwendung.
- Problemergebnisse werden Cloud-Testergebnisdatensätzen (CTRs) in zugeordnet Konfigurations-Compliance Anwendung.