--- Release : - brazil ft:locale : - English ft:publication_title : - Brazil Security Management ft:clusterId : - security bundleId : - security workflow : - Technology --- Brazil Security Management - [Security Operations](https://www.servicenow.com/docs/r/security-management/security-operations-landing-page.html?contentId=pwEpB918W_ag9uLin0b8Rw) - [Exploring Security Operations](https://www.servicenow.com/docs/r/security-management/understanding-secops.html?contentId=VZdP0rA5oCXjpkmDyuV81A) - [ServiceNow Otto for Security Incident Response (SIR)](https://www.servicenow.com/docs/r/security-management/now-assist-for-security-incident-response-sir/now-assist-security-incident-landing.html?contentId=3Hk~R0W66V~jR5udxmstww) - [Explore](https://www.servicenow.com/docs/r/security-management/now-assist-for-security-incident-response-sir/exploring-now-assist-security-incident.html?contentId=VDoM6~eIKQQqW9k9tlUr3w) - [Supporting information](https://www.servicenow.com/docs/r/security-management/now-assist-for-security-incident-response-sir/supporting-information-now-assist-security-incident.html?contentId=YxRxl6_62FwRu88grdPS3A) - [ServiceNow Otto for Threat Intelligence Security Center (TISC)](https://www.servicenow.com/docs/r/security-management/now-assist-tisc-landing.html?contentId=lwWJR8IawCKpd~IRyiL~pw) - [Explore](https://www.servicenow.com/docs/r/security-management/exploring-now-assist-tisc.html?contentId=b_aIstVcqsq1ClHgLndhBw) - [Configure](https://www.servicenow.com/docs/r/security-management/configuring-now-assist-tisc.html?contentId=Dj_Pyy~XlSNyy3_H0BDYZg) - [Use generative AI skills](https://www.servicenow.com/docs/r/security-management/using-now-assist-tisc.html?contentId=TvcK4XPSIbE1YQM9sEz8CA) - [ServiceNow Otto for Unified Security Exposure Management](https://www.servicenow.com/docs/r/security-management/now-assist-for-usem-landing-ties.html?contentId=hqsoK_1d3ihknsRqB8DUdw) - [Generative AI skills with USEM](https://www.servicenow.com/docs/r/security-management/using-now-assist-skills-vulnerability-response.html?contentId=6rp5zIS0A3uFg~D0fCP0dA) - [Agentic workflows with USEM](https://www.servicenow.com/docs/r/security-management/using-now-assist-ai-agents-vr.html?contentId=ab0zssVwLa8G1VbGIwN3_g) - [Supporting information](https://www.servicenow.com/docs/r/security-management/supporting-information-now-assist-vr.html?contentId=oeFVN0yUvvArEfBoYMp9dw) - [LLM-powered SIR integration builder](https://www.servicenow.com/docs/r/security-management/sir-integration-builder-now-assist.html?contentId=iAGFlCImX2RzBUSvrSLqUg) - [Explore](https://www.servicenow.com/docs/r/security-management/explore-sir-integration-builder.html?contentId=ZRRMWmliRX~TUkAlv537YA) - [Install](https://www.servicenow.com/docs/r/security-management/install-sir-integration-toolkit.html?contentId=duY7wJZ6toK4LPv8YpilQw) - [Use SIR Integration Builder](https://www.servicenow.com/docs/r/security-management/using-sir-integration-builder.html?contentId=SoaHaE0VHk~qxB4ZcTzQiw) - [Add an integration](https://www.servicenow.com/docs/r/security-management/add-a-new-integration.html?contentId=9DntM4DjLStKitiOJtVoig) - [Add application details](https://www.servicenow.com/docs/r/security-management/add-application-details.html?contentId=~UrvY4cXVb0gHuq3Gvn8OQ) - [Add connection details](https://www.servicenow.com/docs/r/security-management/add-connection-details.html?contentId=p4t~Dw_ElmkvOTD1zpnZ3g) - [Add capability details](https://www.servicenow.com/docs/r/security-management/choose-capabilities.html?contentId=NOP7Jhxug9Rl8x0XJ4cDiA) - [Add APIs](https://www.servicenow.com/docs/r/security-management/add-apis.html?contentId=jRkRb_0ndbKrdq7Ed3zwzw) - [Review integration](https://www.servicenow.com/docs/r/security-management/review-integration.html?contentId=ltYPpZ22fgPZDhJmuglfqw) - [Verify capabilities in ServiceNow Studio](https://www.servicenow.com/docs/r/security-management/verify-capabilities.html?contentId=Zgkobhn7zdWv9snmr_DKBA) - [Use capabilities in SIR Workspace](https://www.servicenow.com/docs/r/security-management/use-capabilities-sir-workspace.html?contentId=CCsMxbA5wUV82kq6HLY9dw) - [Edit an integration](https://www.servicenow.com/docs/r/security-management/edit-an-integration-sir.html?contentId=UlXJvUmbxofmuhbl5rBtxQ) - [SIR Integration Builder reference](https://www.servicenow.com/docs/r/security-management/sir-integration-builder-reference.html?contentId=RfCjCgp1SwklF2sXK_WjyA) - [Prompt Data table](https://www.servicenow.com/docs/r/security-management/promptdata-table.html?contentId=Xf2iMA_mN42ntzXpR1ZH5A) - [Unified Security Exposure Management](https://www.servicenow.com/docs/r/security-management/unified-security-exposure-management-landing-page.html?contentId=~ppgSrI6hfwfF2WXOQRwGg) - [Explore](https://www.servicenow.com/docs/r/security-management/exploring-unified-security-exposure-management.html?contentId=JcE9MmIeylwdthSfLqDzuw) - [Security Exposure Management Workspace](https://www.servicenow.com/docs/r/security-management/sem-workspace-user-interface.html?contentId=Uf_KUgfHeKOQHYOx2r9dBA) - [Administration](https://www.servicenow.com/docs/r/security-management/sem-administration-console.html?contentId=zjjoyae7cOw6hRIwq2~6NA) - [Visualization library](https://www.servicenow.com/docs/r/security-management/sem-visualization-library.html?contentId=p_nkmrUUHKkZGxNYJ5bdJA) - [AI Exposures](https://www.servicenow.com/docs/r/security-management/ai-security-exposure-home.html?contentId=XpiaaktFGSz5CspkKZmVxQ) - [Cloud Exposure view](https://www.servicenow.com/docs/r/security-management/vr-cloud-exposure-view-db.html?contentId=W2k330eahOTtq_UwfDsyhA) - [Approvals view](https://www.servicenow.com/docs/r/security-management/sem-unified-approval-rules-explore.html?contentId=vSKCeFJx2WDW82OuSMOx0A) - [Finding view](https://www.servicenow.com/docs/r/security-management/sem-findings-view.html?contentId=9XYntPGycm0ZjycLWk6v4Q) - [Remediation view](https://www.servicenow.com/docs/r/security-management/sem-workspaces-ui-remediation-module.html?contentId=_8V5vHLuD2wZ_uoOrBVszQ) - [List view](https://www.servicenow.com/docs/r/security-management/sem-workspace-list-page.html?contentId=gTlzh76M_DIseid17PDHyw) - [Watch topics](https://www.servicenow.com/docs/r/security-management/sem-watch-topic.html?contentId=63a3qd5RF2WKZ~g8MwKIeQ) - [Health Dashboard](https://www.servicenow.com/docs/r/security-management/sem-health-dashboard-overview.html?contentId=6H42P7ejqB0qMPZDXmqNgg) - [Security Exposure Management workflow](https://www.servicenow.com/docs/r/security-management/sem-workflow.html?contentId=~2cy4RP~09w6DwAgQ~hB2Q) - [Automating prioritization and triaging](https://www.servicenow.com/docs/r/security-management/sem-automating-prioritization-triaging.html?contentId=LJsMn~fGODh3TC3taCwoDA) - [Associating finding with a configuration item using lookup rules](https://www.servicenow.com/docs/r/security-management/sem-associate-finding-configuration-item-using-lookup-rules.html?contentId=TVPo~y_pJgFM6flNMHlNLQ) - [Managing unmatched configuration items (CIs)](https://www.servicenow.com/docs/r/security-management/sem-unmatchedCIs.html?contentId=ukSKwAfVmqhT5mJIY6hfkA) - [Managing unclassed hardware](https://www.servicenow.com/docs/r/security-management/sem-unclassed-hardware.html?contentId=F1Cwi37UkAamsgifCwfTFw) - [Steps to help prevent duplicate or orphaned records after running lookup rules](https://www.servicenow.com/docs/r/security-management/sem-ci-identifier-rules-impl-test.html?contentId=TyEo0~TzjvBIUT~o62VIXQ) - [Categorizing findings and discovered items using classification rules](https://www.servicenow.com/docs/r/security-management/sem-categorizing-findings-discovered-items.html?contentId=9OgtZwD3ntVaUQ_WpmGBZA) - [Prioritizing vulnerabilities and other findings using roll-up calculators](https://www.servicenow.com/docs/r/security-management/sem-prioritizing-vulnerabilities-other-findings.html?contentId=R92M91U0505hzzTTlgTKzQ) - [Vulnerability Response Rollup Calculators](https://www.servicenow.com/docs/r/security-management/sem-vuln-rollup-calculator.html?contentId=3Ga2KJAs9uiX3FM8OMC_SA) - [Assigning findings to remediation teams using assignment rules](https://www.servicenow.com/docs/r/security-management/sem-assigning-findings-to-remediation-teams.html?contentId=NPZ8C~_l04QUWmRBuU0zWQ) - [Removing assignments from findings and remediation tasks](https://www.servicenow.com/docs/r/security-management/sem-unassigning-findings.html?contentId=sS6BphI0X1yFtWvbmT14IQ) - [Defining your own service level agreements (SLAs) using remediation target rules](https://www.servicenow.com/docs/r/security-management/sem-defining-your-own-sla.html?contentId=2vGZfK82CB2a2~KgEVv5sA) - [Deferring findings automatically without manual intervention using exception rules](https://www.servicenow.com/docs/r/security-management/sem-exception-rules-overview.html?contentId=LvwlboT5jJRcKe6XlL~tmw) - [Grouping multiple findings as remediation tasks for easy processing using remediation task rules](https://www.servicenow.com/docs/r/security-management/sem-grouping-multiple-findings-remediation-tasks-processing.html?contentId=zCe6SY1uDYc7YGlPXyGh2Q) - [Closing stale detections and findings automatically using auto-close rules](https://www.servicenow.com/docs/r/security-management/sem-closing-stale-findings-automatically.html?contentId=MJHzW_qrWlZBL5OygwnsXg) - [Deleting stale findings automatically using auto-delete rules](https://www.servicenow.com/docs/r/security-management/sem-deleting-stale-findings-automatically.html?contentId=8NJE~FLD6341pnkzdcZgLA) - [Controlling the ingestion volume with automatic exclusion](https://www.servicenow.com/docs/r/security-management/sem-controlling-ingestion-volume-automatic-exclusion.html?contentId=yyTpZSND6oaubM29bggmzg) - [Severity mapping for Unified Security Exposure Management](https://www.servicenow.com/docs/r/security-management/sem-severity-mapping.html?contentId=aKMYC7H9q0yoBodMOFCG0A) - [Creating CIs using the Identification and Reconciliation engine](https://www.servicenow.com/docs/r/security-management/sem-ci-creation-using-IRE.html?contentId=RNq1f_t0LMQuz~XCHq3fJQ) - [Updating CI class for unmatched cloud assets](https://www.servicenow.com/docs/r/security-management/sem-updating-class-cloud-resource-hybrid-assets.html?contentId=zrpp8LjPX_YORfQRlUo5AA) - [Implement](https://www.servicenow.com/docs/r/security-management/configuring-security-exposure-management.html?contentId=oehhhl10iKhGZuAlYJhkoQ) - [Installing Security Exposure Management Workspace applications](https://www.servicenow.com/docs/r/security-management/sem-installing-required-applications.html?contentId=q55kTlFs~Co_R~5yLn_J4Q) - [Migration upgrade prerequisites](https://www.servicenow.com/docs/r/security-management/sem-install-prerequisites.html?contentId=blR2TwT0vTjsWF5Ma~VI4A) - [Install Unified Security Exposure Management](https://www.servicenow.com/docs/r/security-management/sem-install-and-configure.html?contentId=AikoBTkNyTxOqsyfqACnEg) - [Download and activate applications](https://www.servicenow.com/docs/r/security-management/sem-install-required-applications.html?contentId=PYkxfbqZcFklwrCXft6LJA) - [Security Exposure Management Workspace Roles](https://www.servicenow.com/docs/r/security-management/sem-new-roles-installed.html?contentId=V7O~wt9s6p5fqoipqHaKmQ) - [Access control lists (ACLs) for administration rules](https://www.servicenow.com/docs/r/security-management/sem-acls-for-admin-rules.html?contentId=7hjw57li21T7~7UI_KlBUQ) - [Security Exposure Management Workspace personas and granular roles](https://www.servicenow.com/docs/r/security-management/sem-persona-overview.html?contentId=0BUBDq6EUKzr19aS1UC5_g) - [Assign the Vulnerability Response persona roles using Setup Assistant](https://www.servicenow.com/docs/r/security-management/sem-assign-personas_SA.html?contentId=SkK0z_AKobZ6kav9ypQXQg) - [Manage persona and granular roles for Vulnerability Response](https://www.servicenow.com/docs/r/security-management/sem-manage-granular-roles.html?contentId=CNbcU87stAV6ft1TfdjzBg) - [Configure watchdog](https://www.servicenow.com/docs/r/security-management/sem-watchdog-configure.html?contentId=Ccpf5PCZfGrGkokAXlHsfQ) - [Configure rules to manage findings](https://www.servicenow.com/docs/r/security-management/sem-configure-rules-manage-findings.html?contentId=ewYhqoa3q94QKJZpfXWcgw) - [Configuring lookup rules](https://www.servicenow.com/docs/r/security-management/sem-configure-lookup-rules.html?contentId=ENc0YY2CTujUr3gPb0uG4A) - [Configuring classification rules](https://www.servicenow.com/docs/r/security-management/sem-configure-classification-rules.html?contentId=AzpOhzwp7ZteYbI9Xsjixg) - [Configuring roll-up calculator rules](https://www.servicenow.com/docs/r/security-management/sem-configure-risk-rules.html?contentId=KXeGluEitUV2oUmOhE9aXw) - [Configuring assignment rules](https://www.servicenow.com/docs/r/security-management/sem-configure-assignment-rules.html?contentId=JIJFB63Vzytr4UuiNs2NkA) - [Configuring remediation target rules](https://www.servicenow.com/docs/r/security-management/sem-configure-remediation-target-rules.html?contentId=03ZUlA~YLOzIKprPI9a2sQ) - [Configuring an exception rule](https://www.servicenow.com/docs/r/security-management/sem-configure-exception-rule.html?contentId=6JkSxw_4HIkerMT22Gc0Hg) - [Create an exception rule](https://www.servicenow.com/docs/r/security-management/sem-create-exception-rule.html?contentId=L4X1G0RILqCu_INatvNiCQ) - [Approve an exception rule request](https://www.servicenow.com/docs/r/security-management/sem-approve-ex-rule-request.html?contentId=t9qFGf7ZJ2DQGbaPYvZGhg) - [Activating an exception rule](https://www.servicenow.com/docs/r/security-management/sem-activate-ex-rule.html?contentId=XXEF5iKFIehhaogqFq76vA) - [Reopen an exception rule](https://www.servicenow.com/docs/r/security-management/sem-reopen-ex-rule.html?contentId=tPhOtRM8vTI6ynOuPl1U0w) - [Update an approved exception rule](https://www.servicenow.com/docs/r/security-management/sem-update-approved-ex-rule.html?contentId=Z5in77kHDrdjnvIiAah5qw) - [Delete an exception rule](https://www.servicenow.com/docs/r/security-management/sem-delete-ex-rule.html?contentId=fWyx2iIPjYJQ3HWoEXoqmA) - [Define fields and weights for the risk rule for Unified Security Exposure Management risk calculators](https://www.servicenow.com/docs/r/security-management/sem-vuln-calc-define-risk-rule-fields.html?contentId=EO2PlWiDtxMy7GTvK0YE4g) - [Configuring remediation task rules](https://www.servicenow.com/docs/r/security-management/sem-configure-remediation-task-rules.html?contentId=U5g2_DR_E3aIwh_hjKVDrA) - [Configuring auto-close rules](https://www.servicenow.com/docs/r/security-management/sem-configure-auto-close-rules.html?contentId=zhIVB64b7_Smf1Z7qtCQIg) - [Configuring auto-delete rules](https://www.servicenow.com/docs/r/security-management/sem-configure-auto-delete-rules.html?contentId=RlXFEh9H2OZ49UV1VuksVg) - [Configuring exclusion rules](https://www.servicenow.com/docs/r/security-management/sem-configure-exclusion-rules.html?contentId=MIETUDT6ZR8l0dFuFApoBw) - [Create or edit exclusion rules](https://www.servicenow.com/docs/r/security-management/sem-create-or-edit-exclusion-rules.html?contentId=1u1AymGiq1lfLf_x8VaZCg) - [Approve or reject an unassign request](https://www.servicenow.com/docs/r/security-management/sem-approve-unassign-requests.html?contentId=K_bpYgGAHrB0WNKRYrWyuQ) - [Approval workflow configurations for unassign request](https://www.servicenow.com/docs/r/security-management/sem-unassign-approval-rules.html?contentId=Hz_DkGEUsGuFGdgB2JF9jA) - [Configure AI skills and agentic workflows for USEM](https://www.servicenow.com/docs/r/security-management/configuring-now-assist-for-vulnerability-response.html?contentId=Lu1JZUVN20Uyuh2iDNWGGA) - [Configure a skill](https://www.servicenow.com/docs/r/security-management/activate-skills-now-assist-vulnerability-response.html?contentId=8FbZubnP3Sq_284zVhO4Kw) - [Configure an agentic workflow](https://www.servicenow.com/docs/r/security-management/now-assist-vr-acticvate-agentic-workflow.html?contentId=R8ti4xOLt6Yvg6LGptgiRg) - [Configure AI Security Exposure Management](https://www.servicenow.com/docs/r/security-management/ai-security-exposure-install-config.html?contentId=VPCQanxS0cDYEw2tOQ89lA) - [Configure Exception Management for Security Exposure Management](https://www.servicenow.com/docs/r/security-management/sem-configure-exp-mngmt-vr.html?contentId=RL65sIlpt8ML73NaZ9dVTg) - [Request an exception using GRC: Policy and Compliance Management](https://www.servicenow.com/docs/r/security-management/sem-integration-with-grc.html?contentId=2lQMpZPBseLcTJx_Zea1OQ) - [Specify the duration of an exception requested for a remediation task](https://www.servicenow.com/docs/r/security-management/sem-ex-req-sysprop.html?contentId=N6vKsNHM2LFDh_zfaj_AHw) - [Configure email notifications in Unified Security Exposure Management](https://www.servicenow.com/docs/r/security-management/sem-configure-email-notifications.html?contentId=dWUzDOWrj6lUtoBUOTvQFA) - [Configure email templates in Unified Security Exposure Management](https://www.servicenow.com/docs/r/security-management/sem-configure-email-templates.html?contentId=OAkzTCIZb6Ge7aJrfqfEHg) - [Configure a severity map in the Security Exposure Management Workspace](https://www.servicenow.com/docs/r/security-management/sem-configure-severity-map.html?contentId=KeO6cfqkgQ8gBnASlRqn9w) - [Configure advanced Settings in Security Exposure Management Workspace](https://www.servicenow.com/docs/r/security-management/sem-advanced-settings.html?contentId=ueh2M1oc3QpEZ6F_3MRhHQ) - [Configure Visualization library](https://www.servicenow.com/docs/r/security-management/sem-configure-visualization-library.html?contentId=eguqR15GI80ItUJxWR3s7g) - [Create a custom widget](https://www.servicenow.com/docs/r/security-management/sem-create-widget.html?contentId=TDJwhnry8THFDdzHtNpdpg) - [Update a widget](https://www.servicenow.com/docs/r/security-management/sem-update-widget.html?contentId=2pMEMBBkbLGkyjQulw6Xcg) - [Localize widget titles](https://www.servicenow.com/docs/r/security-management/sem-localize-widget-titles.html?contentId=aFRtf21Kbd4MdedpKrvNYQ) - [Configure users and groups in Security Exposure Management Workspace](https://www.servicenow.com/docs/r/security-management/sem-configure-users-groups-overview.html?contentId=u0SxZCrzsukNA8UTZ59Pwg) - [Add groups to a role](https://www.servicenow.com/docs/r/security-management/sem-add-groups-to-role.html?contentId=SiYbHa0~62BmPlpW8isx7g) - [Add users to a role](https://www.servicenow.com/docs/r/security-management/sem-add-users-to-role.html?contentId=VxznsIVWa~o8QOu4bmaftA) - [Set up security tag groups and tags](https://www.servicenow.com/docs/r/security-management/sem-create-class-group-and-tags.html?contentId=Dqn3ZL1cp5XlwwN~RI8Drw) - [Create security tag rules](https://www.servicenow.com/docs/r/security-management/sem-create-security-tag-rules.html?contentId=03tWcaTIlS9Gt7JleY9wfQ) - [Import security tag rules](https://www.servicenow.com/docs/r/security-management/sem-import-security-tag-rules.html?contentId=yVoN83W4kShIYZUiV7rLWg) - [Integrate](https://www.servicenow.com/docs/r/security-management/integrating-usem.html?contentId=nBm8xUDNENDCEGLHeiI67A) - [Review Unified Security Exposure Management integrations](https://www.servicenow.com/docs/r/security-management/review-usem-integrations.html?contentId=XUlDQs5mH1xO2IPI6nDJxg) - [Early Warning for Security Exposure Management](https://www.servicenow.com/docs/r/security-management/armis-early-warning-integration.html?contentId=6VzqZI7zz39Wik3rbyGICg) - [Install](https://www.servicenow.com/docs/r/security-management/early-warning-install.html?contentId=rEv4SvVZAj5QqXLgS3~Dqg) - [Set up requirements](https://www.servicenow.com/docs/r/security-management/early-warning-integration-setup.html?contentId=VzXTNJkGMJU1q8nVKyz8QA) - [Configure the Early Warning for Security Exposure Management integration](https://www.servicenow.com/docs/r/security-management/configure-early-warning-integration.html?contentId=G4h2PjOyxshdWeIVoyjRzw) - [Schedule the integrations](https://www.servicenow.com/docs/r/security-management/schedule-ew-integration.html?contentId=beUvhiuLnZ1Gs13wpJmScQ) - [View Early Warning for Security Exposure Management integration health](https://www.servicenow.com/docs/r/security-management/view-armis-early-warning-health.html?contentId=J6e6pbnxXFjgDcgbPYvDww) - [Add Early Warning criteria to a risk rule](https://www.servicenow.com/docs/r/security-management/add-armis-early-warning-risk-rule.html?contentId=d6DF4G9R8U8y80xSptaKhw) - [Early Warning CVD Attributes field reference](https://www.servicenow.com/docs/r/security-management/early-warning-cvd-attributes.html?contentId=BSojO~~7PJaBWE50T_twgw) - [Fix Intelligence for Security Exposure Management](https://www.servicenow.com/docs/r/security-management/fix-intel-for-usem-landing.html?contentId=3h15L2qbuTEmKiDci9bJzA) - [Exploring Fix Intelligence for SEM](https://www.servicenow.com/docs/r/security-management/exploring-fix-intel.html?contentId=eoi6L3WQvUDbkRnfdsHIgw) - [How Fix Intelligence for SEM works](https://www.servicenow.com/docs/r/security-management/fix-intel-data-flow.html?contentId=KPw4u1VaEyueGNJKWOL~UQ) - [Install Fix Intelligence for SEM](https://www.servicenow.com/docs/r/security-management/install-fix-intel.html?contentId=8saP64HoKhZHCJ5EBnZsYA) - [Use](https://www.servicenow.com/docs/r/security-management/using-fix-intel-security-exposure-management.html?contentId=BLVwWCvQmwEf08Tx4VF7Pw) - [View fixes in USEM Workspace](https://www.servicenow.com/docs/r/security-management/view-fixes-in-workspace.html?contentId=He_pGbMtYTv0I0W9odEzAg) - [Group findings by fix](https://www.servicenow.com/docs/r/security-management/group-findings-by-fix.html?contentId=EbPUgkeKqF9ycrKgS2TvhA) - [Fix links on findings](https://www.servicenow.com/docs/r/security-management/fix-links-on-findings.html?contentId=9B_bid6U64dI1C_JAmCVxg) - [Reference](https://www.servicenow.com/docs/r/security-management/fix-intel-reference.html?contentId=JgJ9JYKuw9tpDunl_OPSaA) - [Components installed](https://www.servicenow.com/docs/r/security-management/fix-intel-components-installed.html?contentId=ZH_NI2M86_MR90CKhORqGQ) - [Understanding Fix records](https://www.servicenow.com/docs/r/security-management/understanding-fix-records.html?contentId=uXhX69TdfMww2JWOGG~fYg) - [Explore the Palo Alto Prisma AIRS Integration for AI Security Exposure Management](https://www.servicenow.com/docs/r/security-management/prisma-airs-integration.html?contentId=4oBZdBPoyjYY8zB9q6LhJA) - [Install](https://www.servicenow.com/docs/r/security-management/install-prisma-airs-integration.html?contentId=BQ7NEL~CfQo9l7Riz3IpFQ) - [Field mapping](https://www.servicenow.com/docs/r/security-management/palo-alto-prisma-airs-mapping.html?contentId=Q0HVW5nirjw4ookw1vuNSg) - [Use](https://www.servicenow.com/docs/r/security-management/using-unified-security-exposure-management.html?contentId=Pas0qQfDvC2rSTs3UMVJSw) - [Create a dashboard in the Findings view page](https://www.servicenow.com/docs/r/security-management/sem-create-dashboard.html?contentId=K1gR~RFbRBDsA~1_F~Fugg) - [Evaluate vulnerability exposure data using generative AI with Security Exposure 360](https://www.servicenow.com/docs/r/security-management/now-assist-review-vulnerability-exposure-data.html?contentId=K7Eg6fiaHmO3Jf0SFnvaPw) - [AI Security Exposure Management](https://www.servicenow.com/docs/r/security-management/exploring-ai-security-exposure.html?contentId=bGnuHLBbRpTg1NTUINDr6Q) - [Using the AI guardrails helper skill and agentic workflow](https://www.servicenow.com/docs/r/security-management/ai-security-exposure-skill-agent.html?contentId=Ru~F48simPprvqwYMg4J9w) - [Use the AI guardrails helper skill](https://www.servicenow.com/docs/r/security-management/ai-security-exposure-use-aiskill.html?contentId=FQlki3t~vfYY5gXMslA7Tw) - [Use the AI guardrails helper agentic workflow](https://www.servicenow.com/docs/r/security-management/ai-security-exposure-use-agent.html?contentId=07ZksIMv~v47CNSw6~j_MA) - [Using Employee Center AI asset remediation](https://www.servicenow.com/docs/r/security-management/ai-security-exposure-employee-workflow.html?contentId=ifxnRYZDiB_7LXQKt4zIUg) - [Remediate AI exposure tasks in Employee Center](https://www.servicenow.com/docs/r/security-management/ai-security-exposure-management-employee-task.html?contentId=IF4jvzE3CIs8geUc2l14ZQ) - [Components installed with AI Security Exposure Management](https://www.servicenow.com/docs/r/security-management/installed-with-aisecmanagement.html?contentId=ulxr~xqFFr6K6dIHw0nlTg) - [Generate vulnerability insights with generative AI](https://www.servicenow.com/docs/r/security-management/sem-insights-skill.html?contentId=Oygcndn~3_7fVOr7AYfAOA) - [Retrieve vulnerability and exposure data with generative AI](https://www.servicenow.com/docs/r/security-management/retrieve-vr-data.html?contentId=uySXpi6F~E3fUmFY7~2d1A) - [Assess vulnerability exposure with generative AI](https://www.servicenow.com/docs/r/security-management/assess-exposure-vr-aiagent.html?contentId=hqyjFso3cbOkYnlacOTsTw) - [Identify duplicate vulnerable items with generative AI](https://www.servicenow.com/docs/r/security-management/dedupe-host-vi-now-assist-vulnerability-response.html?contentId=pB4exubAq2rD2nxyqhIfcg) - [Approval recommendations using generative AI](https://www.servicenow.com/docs/r/security-management/now-assist-vr-generating-approvals.html?contentId=OmPPnuAbFY_4k67F_QlLGQ) - [Generate approval recommendations with generative AI](https://www.servicenow.com/docs/r/security-management/sem-approval-recommendation-skill.html?contentId=OfQhTUv8BH61WC3a2rFliw) - [Suggest vulnerability solutions with generative AI](https://www.servicenow.com/docs/r/security-management/solutions-now-assist-vulnerability-response.html?contentId=5RflWJ5rO0ODF9_EezYueg) - [Analyze remediation status with generative AI](https://www.servicenow.com/docs/r/security-management/sla-targets-vr-aiagent.html?contentId=VmbD2FHBccBm53KxtIiT3A) - [Creating an API connector with a generative AI skill](https://www.servicenow.com/docs/r/security-management/using-now-assist-api-connector.html?contentId=TdkzouE9vRGCKJsBKTAaCg) - [Create API connector with generative AI](https://www.servicenow.com/docs/r/security-management/select-api-template.html?contentId=DsyT8x3mbT1whlFhn4nRnQ) - [Reclassify unclassed hardware](https://www.servicenow.com/docs/r/security-management/sem-reclassify-unclassed-hardware.html?contentId=iSXeOjyGlfPwZ9A3phAOvQ) - [Bulk edit in the Security Exposure Management Workspace](https://www.servicenow.com/docs/r/security-management/sem-workspace-bulk-edit-overview.html?contentId=XPf_hCcuD1dO3mVm~FblhQ) - [Using bulk edit in the Security Exposure Management Workspace](https://www.servicenow.com/docs/r/security-management/sem-using-bulk-edit.html?contentId=S9e1zlxQ1CFERYDm3sYChA) - [Update the state of records in bulk in the Security Exposure Management Workspace](https://www.servicenow.com/docs/r/security-management/sem-bulk-edit-update-state.html?contentId=9CjuadvnNBXgoJAMVn~6Rg) - [Bulk edit host vulnerable items with patches and solutions](https://www.servicenow.com/docs/r/security-management/sem-bulk-edit-patches-solutions.html?contentId=dUStAaURzFALYvyDg8c6vQ) - [Assign records to an assignment group in bulk](https://www.servicenow.com/docs/r/security-management/sem-bulk-edit-assign.html?contentId=6zekooBhIADV17cI9Cfz2g) - [Remove assignments for host vulnerable items in bulk](https://www.servicenow.com/docs/r/security-management/sem-bulk-edit-unassign.html?contentId=qxrh0gZI9spuebKCwbODcQ) - [Request bulk exception in the Security Exposure Management Workspace](https://www.servicenow.com/docs/r/security-management/sem-bulk-edit-request-exception.html?contentId=AUA2cUaqQ_tqiqjTNq6dGw) - [Bulk edit risk reduction](https://www.servicenow.com/docs/r/security-management/bulk-edit-risk-reduction.html?contentId=QgLTdVcoNBmvu01jVW~E5g) - [Bulk edit risk reduction restrictions](https://www.servicenow.com/docs/r/security-management/bulk-edit-risk-restrictions.html?contentId=ijCqFu4hIMEjj6MLptpSZA) - [Request risk reduction for findings](https://www.servicenow.com/docs/r/security-management/reduce-risk-bulk-edit.html?contentId=Cza3Qt9ZbIjK0qdNE7WMMQ) - [Bulk edit for false positive in the Security Exposure Management Workspace](https://www.servicenow.com/docs/r/security-management/sem-bulk-edit-request-false-positive.html?contentId=vQCaFPek4oH60BxY4Yo5Tw) - [Close records in bulk in the Security Exposure Management Workspace](https://www.servicenow.com/docs/r/security-management/sem-bulk-edit-close-records.html?contentId=kvspmtW4OCp_ElruyfrrXw) - [Use the List view in the Security Exposure Management Workspace](https://www.servicenow.com/docs/r/security-management/sem-ws-list-view.html?contentId=l8IWxGP94kmXG0tnb~vQ8w) - [Create a customized list of records](https://www.servicenow.com/docs/r/security-management/sem-create-custom-list.html?contentId=ND0_mIiTEyVJD~RHqLmJ_w) - [Create a remediation task manually in the Security Exposure Management Workspace](https://www.servicenow.com/docs/r/security-management/sem-create-remediation-task.html?contentId=210yq~P6EuhEp~Voaav3lw) - [Enable or disable the import of test results for a Qualys test group](https://www.servicenow.com/docs/r/security-management/sem-enable-disable-imports-qualys.html?contentId=yJSHEGjTVeExuhwjFPpWpQ) - [Modify the severity for a CVE or TPE](https://www.servicenow.com/docs/r/security-management/sem-modify-reset-severity.html?contentId=~0iUJxsMIj6K4hR8t5JL~Q) - [Use Remediation Effort records](https://www.servicenow.com/docs/r/security-management/sem-ws-remed-eff-rcd.html?contentId=fpbaQcRDPYSf77MA073vBQ) - [Create a remediation effort in the Security Exposure Management Workspace](https://www.servicenow.com/docs/r/security-management/sem-create-rev16.html?contentId=Rels4IrbjwCVTeEu_jWZlQ) - [Create a remediation task on-demand from Remediation Effort in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/sem-create-rt-frm-re.html?contentId=Ttf_R~W9xnVmnOLi_KdIWw) - [Create a recurring remediation effort in the Security Exposure Management Workspace](https://www.servicenow.com/docs/r/security-management/sem-create-recurringRE-steal-VI.html?contentId=XhYeHCrLDgEsVIfy3XC11g) - [Transfer records to remediation efforts in the Security Exposure Management Workspace](https://www.servicenow.com/docs/r/security-management/sem-transfer-VI-to-RE.html?contentId=5RTFdoK5~B3MmGYBjXwYYA) - [Approve or reject requests in the Security Exposure Management Workspace](https://www.servicenow.com/docs/r/security-management/sem-approve-requests.html?contentId=sEQWk04X6b5zuN0mWMFCDQ) - [Add a compensating control to the library](https://www.servicenow.com/docs/r/security-management/sem-create-compensatory-control.html?contentId=yC8Wv4wc4nvjmkKJRVlLCQ) - [Associate compensating controls with CVEs or TPEs for risk reduction requests](https://www.servicenow.com/docs/r/security-management/sem-associate-controls-cve-risk-reduction.html?contentId=foo92PMrVIK1nts5V30ECg) - [Disable or enable risk reduction for a CVE or TPE](https://www.servicenow.com/docs/r/security-management/sem-disable-risk-reduction.html?contentId=84_Ddo1F8I_dLDFBOXfzpQ) - [Examples for remediation task creation in the Security Exposure Management Workspace](https://www.servicenow.com/docs/r/security-management/sem-create-remediation-task-examples.html?contentId=9d_FZedbVAykrJ7gFabTkA) - [Exception Management Overview](https://www.servicenow.com/docs/r/security-management/sem-exception-management-overview.html?contentId=W3WMT6QfqW25DXfA6E_A5A) - [Approver roles required for Security Exposure Management Workspace](https://www.servicenow.com/docs/r/security-management/sem-approve-or-reject-request.html?contentId=MtDB0jeo4kOQxf3LG2CkYA) - [Questionnaire support in Exception Management via Smart Assessment](https://www.servicenow.com/docs/r/security-management/sem-smart-assessment-exp-management.html?contentId=J7RbldPKIaiXnkd6CZzBGw) - [Compensating controls overview](https://www.servicenow.com/docs/r/security-management/sem-compensating-controls-overview.html?contentId=gYhsl5yEPU7VXKVdV~E5jQ) - [Questionnaire Configuration form fields](https://www.servicenow.com/docs/r/security-management/sem-compensating-controls-approval-rule.html?contentId=9K_d09xXFC9btnZCPfL2VQ) - [Configure an assessment template](https://www.servicenow.com/docs/r/security-management/sem-configure-assessment-template.html?contentId=YkAmt6chT~udW6sct9RM2Q) - [Use case for False positive or Request Exception Questionnaire](https://www.servicenow.com/docs/r/security-management/sem-ques-for-false-positive-or-request-exp.html?contentId=ipEGCnKbjXJP2LzlYbEg5g) - [Defer a Remediation task](https://www.servicenow.com/docs/r/security-management/sem-defer-rem-task.html?contentId=0e3EaCURwxfkZEUNaWKJog) - [Request an extension for a deferred remediation task](https://www.servicenow.com/docs/r/security-management/sem-extend-defer-rem.html?contentId=DfLS4_UwgWyqeNRG4X7HpA) - [Request a false positive for a vulnerable item or remediate task](https://www.servicenow.com/docs/r/security-management/sem-falsepst-reqst.html?contentId=oHmw_TUi4eU1tAr2LzF6iA) - [Unassign a finding or remediation task](https://www.servicenow.com/docs/r/security-management/sem-unassign-finding.html?contentId=QkEFFVolH8Kz1S9d5aveGA) - [Exception management dashboard](https://www.servicenow.com/docs/r/security-management/sem-exception-mgmt-dashboard.html?contentId=T6dfD4sJO32ez41bWA1fxw) - [Exception management notifications](https://www.servicenow.com/docs/r/security-management/sem-exception-mgmt-notifications.html?contentId=lDq~eJpNj64JCjAKOPZxPQ) - [Unified Approvals View](https://www.servicenow.com/docs/r/security-management/sem-approval-view.html?contentId=_BakCW3AIsghvPM4AkjO_g) - [Add an approver](https://www.servicenow.com/docs/r/security-management/sem-add-false-positive-approver.html?contentId=J0c5JX1qazNFIb09X2mSHA) - [Configure Approval List and Form View](https://www.servicenow.com/docs/r/security-management/sem-configure-approval-view.html?contentId=1BohFwpie5qEVcaLt2URnA) - [Reviewing an Approval Request](https://www.servicenow.com/docs/r/security-management/sem-review-approval-request.html?contentId=V6tapJtHkVvVMdytrp20Sw) - [Review questionnaire to approve or reject requets](https://www.servicenow.com/docs/r/security-management/sem-smart-assessment-flow.html?contentId=1OZ3F_yoiYBR7jeO~18Qxg) - [Employee service center for Vulnerability Response](https://www.servicenow.com/docs/r/security-management/employee-center-vr-overview.html?contentId=BU5nBzn2GAAkmaOXXUqOOQ) - [Managing Approvals via the Employee Service Center](https://www.servicenow.com/docs/r/security-management/manage-approvals-ec.html?contentId=wj4ZM8VCxsb9gAnFuONpuw) - [Create a change request in the Remediation view](https://www.servicenow.com/docs/r/security-management/sem-ws-CRs.html?contentId=cNFiSPrk4zp9zS99dUfQxA) - [Reference](https://www.servicenow.com/docs/r/security-management/unified-security-exposure-management-reference.html?contentId=5Jp2vZ2tTewdNf4VRKLCzQ) - [Security Exposure Management Workspace Components](https://www.servicenow.com/docs/r/security-management/sem-components-installed.html?contentId=KT~Aq566Sx4uBPm7ll7gkQ) - [Security Exposure Management Workspace Roles](https://www.servicenow.com/docs/r/security-management/sem-new-roles-installed-d38907e7079.html?contentId=UXnR4MuAQiWntEMmsKluTA) - [Security Exposure Management Workspace Tables](https://www.servicenow.com/docs/r/security-management/sem-new-tables-installed.html?contentId=HXckpPVqPSjsJVAoHd_b_A) - [Security Exposure Management Workspace Scheduled Jobs](https://www.servicenow.com/docs/r/security-management/sem-new-scheduledjobs-installed.html?contentId=k78E9dNoQu1Gd99i6EXvfA) - [Security Exposure Management Knowledge Base articles](https://www.servicenow.com/docs/r/security-management/sem-kb-list.html?contentId=KclBhMX~fEmk1twn3cTDzg) - [Migration upgrade reference information](https://www.servicenow.com/docs/r/security-management/sem-migration-prereq-reference-data.html?contentId=wQUbAdo_aIIMrT7LE_rUDQ) - [Security Exposure Management Workspace Roles](https://www.servicenow.com/docs/r/security-management/sem-new-roles-installed-d38907e7234.html?contentId=3ZBf6fKj3KI7I72xo~D9Xw) - [Visualization widget fields](https://www.servicenow.com/docs/r/security-management/sem-vis-widget-fields.html?contentId=LP4gQ4ZcgDMstuAvRGL~DQ) - [Exception questionnaire scenarios for vulnerable items](https://www.servicenow.com/docs/r/security-management/sem-exception-ques-scenarios.html?contentId=UbSshbmf3QcTq1LpdJu8tA) - [Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vuln-landing-page.html?contentId=LIvp7c0m60dWNQgUCOUjeQ) - [Exploring the Vulnerability Response application](https://www.servicenow.com/docs/r/security-management/vulnerability-response/c_VulnerabilityResponse.html?contentId=2ct1zLSaGfERrV_gCWLpgA) - [Migrating to USEM](https://www.servicenow.com/docs/r/security-management/vulnerability-response/migrating-to-usem.html?contentId=nXNv7FQQQxbUccCpsC335w) - [USEM migration planning](https://www.servicenow.com/docs/r/security-management/vulnerability-response/usem-migration-planning.html?contentId=Tjme7VUACVlBEyE16o6tPw) - [Installation of Vulnerability Response and supported applications](https://www.servicenow.com/docs/r/security-management/vulnerability-response/cj-vr-setup.html?contentId=sPFHsKyF2opyg2yKyfbKCw) - [Vulnerability Response personas and granular roles](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-persona-overview.html?contentId=OF0S3ey2O81wKHoe5tnkGA) - [Vulnerability Response remediation tasks and remediation task rules overview](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vulnerability-groups.html?contentId=wh23po12f0GJlIoR3CR3hg) - [Vulnerability Response remediation target rules](https://www.servicenow.com/docs/r/security-management/vulnerability-response/time-to-remediate-rules.html?contentId=1ShLFlSyBLdYk3m5OEqJXQ) - [Machine Learning solutions for Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/ml_vr.html?contentId=yoKwxIYzuSVPL_AlgNAs9Q) - [Discovered Items](https://www.servicenow.com/docs/r/security-management/vulnerability-response/cj-discovered-items.html?contentId=JUBtsq2_QlrKut_8qgoCww) - [CI changes for discovered items](https://www.servicenow.com/docs/r/security-management/vulnerability-response/reapply-discovered-items-ci-changes.html?contentId=rdhwGUv9VarQCII0YicJHA) - [Re-evaluating discovered items](https://www.servicenow.com/docs/r/security-management/vulnerability-response/re-evaluate-discovered-items.html?contentId=8Jt9LYMOZgDIcMF3lf1NWQ) - [Vulnerability Response remediation task and vulnerable item states](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vulnerabillity-states.html?contentId=yHYmVfzoNZ02AVdmbqTqxw) - [Vulnerable item age calculation and display](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-vi-calcVI-age.html?contentId=Cg9P16fypPVH_AtFwHzunQ) - [Removing assignments from vulnerable items and remediation tasks](https://www.servicenow.com/docs/r/security-management/vulnerability-response/Unassigning_vis.html?contentId=4ayq7KqRm9aK_077cnIL5A) - [Vulnerability Response calculators and vulnerability calculator rules](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vuln-calculators-rules.html?contentId=bqLZhzWXX9cmlR8CaN3UQA) - [Vulnerability Response vulnerable item detections from third-party integrations](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr_host_detections.html?contentId=DCGQoRPVkemBzAQm8s04gw) - [Vulnerability Solution Management](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vuln-solution-mgmt.html?contentId=aKgfT7OfSZq3G9IObknh_Q) - [Microsoft Security Response Center Solution Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mscr-integration.html?contentId=jCfca64083UJvC62xtxxlA) - [Red Hat Solution Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/redhat-integration.html?contentId=tCFJz9n27iIb7RI8QIeo0g) - [Rapid7 solution management](https://www.servicenow.com/docs/r/security-management/vulnerability-response/rapid-7-solution-management.html?contentId=p1zb_FVDfxt4X0X9M_vxiw) - [Generic framework to ingest data from any solution vendor](https://www.servicenow.com/docs/r/security-management/vulnerability-response/ingest-data-solution-vendors-generic-framework.html?contentId=fih3aUSIUDsFkxGUSfdbfw) - [Patch orchestration with Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/patch-orch-legacy-overview.html?contentId=LuzQLRJalfHWU7tqH1tSFQ) - [Exception Management overview](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-exception-management.html?contentId=Z_~UdDJ7SJ6jEcr41d4Wcg) - [Exception rules overview](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vi-classification-rule-based.html?contentId=dDtc0rNawHPqIGZZV74X7g) - [False Positive overview](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-false-positive.html?contentId=DisgxhYAm81hTaPI~Yd7MQ) - [Questionnaire support in Exception Management via Smart Assessment](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-exception-management-smart-assessment.html?contentId=TA08VC4Nb0~uQZkqtAVhXw) - [Configure Assessment template](https://www.servicenow.com/docs/r/security-management/vulnerability-response/configure-assessment-template.html?contentId=~w52JYLDFykvtPhSklWLYw) - [Smart Assessment workflow](https://www.servicenow.com/docs/r/security-management/vulnerability-response/smart-assessment-workflow-integration.html?contentId=XG_Kr1k8Oa0ClvZVMc1Pmw) - [Questionnaire for False positive or Request Exception](https://www.servicenow.com/docs/r/security-management/vulnerability-response/questionnaire-for-false-positive-or-request-exception-in-vr.html?contentId=7RZ3~JZI1zPpH~N_iMWGFw) - [Watchdog for Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/watchdog-overview.html?contentId=_~0LF4u_3H8t8tjSjhzWdA) - [Change management for Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vuln-change_mgmnt_ovrvw.html?contentId=iUPs0pwcTU4X6T_CwJGvPQ) - [Software exposure assessment using Software Asset Management (SAM Foundation)](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr_sw_expsure_ovrvw.html?contentId=apv4ORTL6wLS1h213t9TWg) - [Vulnerability Crisis Management](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vulnerability-crisis-management.html?contentId=PcjGHpOLcUaCAnIuuixHlg) - [Domain separation and Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/domain-separation-vulnerability-response.html?contentId=Q1W0d~Dy0ooDNfPPzC7hxg) - [Service Mapping in Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/service-mapping-vr.html?contentId=l7bOimlJM_axm4o5HJ_Ayg) - [Vulnerability Response implementation](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr_implement-ovrview.html?contentId=4ZyoI~vTroahQu4ylB9GGA) - [Migrate to USEM](https://www.servicenow.com/docs/r/security-management/vulnerability-response/migrate-to-usem.html?contentId=CgLiSxuc9osCUGBjjKi5FA) - [Install Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/install-and-configure-vr.html?contentId=PNazsCMlbnq1zR4DijrJjg) - [Components installed with Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/installed-with-vr.html?contentId=7DErzAtPk3XD16qzi_iwBg) - [Configuring Vulnerability Response using the Setup Assistant](https://www.servicenow.com/docs/r/security-management/vulnerability-response/cj-setup-assistant.html?contentId=0wg8TkPlOScaJArxqRV_dg) - [Assign the Vulnerability Response persona roles using Setup Assistant](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-assign-personas_SA.html?contentId=iao3v~o3UHhweNpZrP94Ig) - [Manage persona and granular roles for Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr_manage_granular-roles.html?contentId=_QjmskKeNAYxPiUxOZtxKA) - [Install Vulnerability Response third-party applications using Setup Assistant](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-installapp-setup-asst.html?contentId=AvyqXJyYyyH8oavG1~WdNQ) - [Importing data with the NVD and CWE integrations and managing third-party libraries](https://www.servicenow.com/docs/r/security-management/vulnerability-response/c_NVDAndCWEDataImport.html?contentId=g5htg3zfRHdf5yoWPcSdPw) - [Install the Solution Management for Vulnerability Response application](https://www.servicenow.com/docs/r/security-management/vulnerability-response/install-and-configure-solution-mgmt.html?contentId=3kkft2TRmDD7gp6Fiw09Yw) - [Install Performance Analytics for Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/install-and-configure-vr-analytics.html?contentId=jO0dMipEAH1KyXQzegVPeQ) - [Vulnerability Response applications and CSDM tables](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-avr-sbom-csdm-guidelines.html?contentId=LiBXsQQ0buvXz0TLyJW6gw) - [Create or edit Vulnerability Response assignment rules](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-vul-assign-rules.html?contentId=9RFXMSsCGpa_t0ExNBMYkw) - [Create a Vulnerability Response assignment rule using ML](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-vr-assignment-rule-with-ml.html?contentId=DHz_7wAzgnelMmnt05k4Qw) - [Create a Vulnerability Response assignment rule for service support](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-vr-assign-rule-svc-support.html?contentId=Y1V17CgbBouIZilOM_KO4g) - [Create or edit Vulnerability Response remediation task rules](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-vul-group-rules.html?contentId=JH_irQp3PmWITY5AtXBr4A) - [Define fields and weights for the risk rule for Vulnerability Response Risk Calculators](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vuln-calc-define-risk-rule-fields.html?contentId=XDuyFCsZimu~dxT4l2aWPA) - [Vulnerability Response Rollup Calculators](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vuln-rollup-calculator.html?contentId=zRmPzyc77dBTQx8it935iw) - [Create or edit a Vulnerability Response remediation target rule](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-time-to-remediate-rule.html?contentId=vU2u_7gAMYj5opSkaJVpKA) - [Configure installed third-party integrations using the Setup Assistant](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-setup-asst-config-thrid-party.html?contentId=sVDWhyYnEZY1ha1MhjZs4Q) - [Configure installed solution integrations for Vulnerability Solution Management using Setup Assistant](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr_SA_manage_supported_apps.html?contentId=7ayKjZS_SBnLdq9L3DznxQ) - [Configure the MS TVM Vulnerability Integration using Setup Assistant](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mstvm-vr-config-in-SA.html?contentId=Ttgak_BjLosm7AkthiJVKQ) - [Configure the Qualys Vulnerability Integration using Setup Assistant](https://www.servicenow.com/docs/r/security-management/vulnerability-response/qualys-config-in-SA.html?contentId=vRPmpIz~LqUWTIc7FWMsLw) - [Configure the Tenable Vulnerability Integration using Setup Assistant](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-tenable-config-in-SA.html?contentId=TQij3LWUoq9nJ96B5tDdgA) - [Setting up vulnerability solution providers](https://www.servicenow.com/docs/r/security-management/vulnerability-response/setup-vulnerability-solution-providers.html?contentId=iedqriiG_awA0F4iTwuduA) - [Prepare solution integration checklist](https://www.servicenow.com/docs/r/security-management/vulnerability-response/prepare-solution-integration-checklist.html?contentId=l1vLO38T2YK1pjHB07cVsA) - [Preparing the Common Vulnerability Reporting Framework (CVRF) solution integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/prepare-cvrf-solution-integration.html?contentId=RWVO~KXpwM1ipQ_zEixE8A) - [Preparing the Common Security Advisory Framework (CSAF) solution integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/prepare-csaf-solution-integration.html?contentId=voDRFJ7vhTJnoNF1xXsIEA) - [Configure vulnerability solution providers](https://www.servicenow.com/docs/r/security-management/vulnerability-response/configure-vulnerability-solution-providers.html?contentId=bw45cFDUt3hgunJHTeUJjQ) - [Common Vulnerability Reporting Framework (CVRF)](https://www.servicenow.com/docs/r/security-management/vulnerability-response/cvrf-common-vulnerability-reporting-framework.html?contentId=Dy0EXE6fGej~_SGsHmQkJQ) - [Import Common Vulnerability Reporting Framework data through file import](https://www.servicenow.com/docs/r/security-management/vulnerability-response/import-cvrf-file.html?contentId=4swbGEoLsZ78krrYsIxaQg) - [Configure Connection and Credential aliases](https://www.servicenow.com/docs/r/security-management/vulnerability-response/configure-connection-credential-aliases.html?contentId=qT51ZEBKFTJQfI53a9r3nw) - [Configure a Common Vulnerability Reporting Framework vendor other than Cisco](https://www.servicenow.com/docs/r/security-management/vulnerability-response/configure-cvrf-vendor.html?contentId=fascLCmYYVjoFjKkAKlX3A) - [Import Common Vulnerability Reporting Framework data from advisories](https://www.servicenow.com/docs/r/security-management/vulnerability-response/import-solution-advisories.html?contentId=YXnh9BG1qo55lIoGAWaDTw) - [Import Common Vulnerability Reporting Framework (CVRF) data through CVRF URL](https://www.servicenow.com/docs/r/security-management/vulnerability-response/import-cvrf-url.html?contentId=ZP1Z_piC66AKqlte7afk6A) - [Troubleshooting Common Vulnerability Reporting Framework data import](https://www.servicenow.com/docs/r/security-management/vulnerability-response/troubleshooting-cvrf-data-import.html?contentId=Bdewf0SIkhOC91tjUDgQlA) - [Common Security Advisory Framework (CSAF)](https://www.servicenow.com/docs/r/security-management/vulnerability-response/csaf-overview.html?contentId=1c_kOMYUKHvo~7WEhGtZLA) - [Import Common Security Advisory Framework data through file import](https://www.servicenow.com/docs/r/security-management/vulnerability-response/import-csaf-file.html?contentId=KR0kuoR_IGTnBfs6DHzagQ) - [Configure Connection and Credential aliases for the Common Security Advisory Framework (CSAF)](https://www.servicenow.com/docs/r/security-management/vulnerability-response/configure-connection-credential-aliases-csaf.html?contentId=pQUifz7CIWPIPifB67Df4w) - [Configure a Common Security Advisory Framework vendor other than Red Hat](https://www.servicenow.com/docs/r/security-management/vulnerability-response/configure-csaf-vendor.html?contentId=MVATZKYLzFf2oNiuo5WC1Q) - [Import Common Security Advisory Framework data from advisories](https://www.servicenow.com/docs/r/security-management/vulnerability-response/import-solution-advisories-csaf.html?contentId=ZyvhFXy8X3CmbLI61CYXsg) - [Import Common Security Advisory Framework (CSAF) data through CSAF URL](https://www.servicenow.com/docs/r/security-management/vulnerability-response/import-csaf-url.html?contentId=euYYtqIB4A9e33ntMQhmzA) - [Troubleshooting Common Security Advisory Framework data import](https://www.servicenow.com/docs/r/security-management/vulnerability-response/troubleshooting-csaf-data-import.html?contentId=3~22gVL1AaCypOrYTv9nmQ) - [Additional Vulnerability Response setup and configuration tasks](https://www.servicenow.com/docs/r/security-management/vulnerability-response/setup-tasks-additional.html?contentId=OirN_8mybr9~gA5HRpHf9Q) - [Quick start tests for Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/quick-start-tests-vr.html?contentId=qMCX5o~HyXbiB~QEjBKlhQ) - [Run the Automated Test Framework (ATF) test suite for Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-run-vr-atf-suite.html?contentId=9QwnmbionhoKpde0XU6BSQ) - [Install Vulnerability Assignment Recommendations for Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/ml-install-and-configure-vul-assign-rec.html?contentId=wyXuOuow3bMYT0roczvZOw) - [Configure Vulnerability Assignment Recommendations for Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/ml-config-assignment-rec.html?contentId=UN8e4PZ6Axjk4oSOjF6YOw) - [Create and train a solution definition for Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/ml-train-sol-definition.html?contentId=1zyvvUxAzmAA9nYSF_eUyA) - [Create a Vulnerability Response calculator](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-vul-calculator.html?contentId=Pk0GEF9Eu80ZGjTu0LRYCQ) - [Disable the default vulnerability calculator if not used](https://www.servicenow.com/docs/r/security-management/vulnerability-response/disable-vuln-calcs.html?contentId=AWu4i~xACXiGDkZfpNyBEQ) - [Create, enable, or, modify Vulnerability Response auto delete rules](https://www.servicenow.com/docs/r/security-management/vulnerability-response/enable-auto-del-vi-vg.html?contentId=EZz0JyGd2j4KIzueejawxQ) - [Add vulnerability significance charts to the Vulnerability Response homepage](https://www.servicenow.com/docs/r/security-management/vulnerability-response/t_AddVulnSign.html?contentId=T3NEaeXHOlfvvVo92yz2LQ) - [Define Vulnerability Response email notifications](https://www.servicenow.com/docs/r/security-management/vulnerability-response/t_DefineEmailNotifications.html?contentId=2~XztZQ0v59Rh4fG9DEnkw) - [Define Vulnerability Response email templates](https://www.servicenow.com/docs/r/security-management/vulnerability-response/t_DefiningEmailTemplates.html?contentId=7VzG4SXxU7btUoRESvm0kA) - [Create or edit remediation target notifications](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-remediation-notification.html?contentId=CBTl8qLrnO2uVZyCeVWWtg) - [Configure the Vulnerability Exposure Assessment](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vuln_sw_expsure_task.html?contentId=9cUYt2XJ2BwSypSaVUMl7g) - [Configure Exception Management for Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/configure-exception-management-settings.html?contentId=2OQbLxa4tCHYHJYCP7oICg) - [Add an exception approver](https://www.servicenow.com/docs/r/security-management/vulnerability-response/add-exception-approver.html?contentId=7Cr0hXUl96CvaciB4TEnlA) - [Configure approval rules for Exception Management](https://www.servicenow.com/docs/r/security-management/vulnerability-response/exception-mgt-approval-rules.html?contentId=7jLLDMDcbjley4lRvUKL8Q) - [Create configurations for an approval rule](https://www.servicenow.com/docs/r/security-management/vulnerability-response/exception-mgt-approval-config.html?contentId=mjV4Z7Arw0Em19AOEucm_Q) - [Create approval levels for Exception Management](https://www.servicenow.com/docs/r/security-management/vulnerability-response/exception-mgt-config-approval-rule.html?contentId=skBQsvN1XS6kbDzz7vIOpg) - [Exception management workflow versus flow designer](https://www.servicenow.com/docs/r/security-management/vulnerability-response/ex-mgt-flow-designer-vs-workflow.html?contentId=raXmg8uQPUpb11H3pahhuA) - [Add a false positive approver](https://www.servicenow.com/docs/r/security-management/vulnerability-response/grant-fp-approver-rights.html?contentId=z2P97KsYsRnPV3EX1uBjTA) - [Configure questionnaire for risk reduction](https://www.servicenow.com/docs/r/security-management/vulnerability-response/configure-approval-rules-risk-reduction.html?contentId=nJULbuvPZEWk8lMSVBR7zA) - [View Vulnerability Response SLAs for remediation tasks](https://www.servicenow.com/docs/r/security-management/vulnerability-response/t_CreateVulnSLA.html?contentId=n8XjWsqPT2wvX0p~x~Rv6w) - [Configure watchdog](https://www.servicenow.com/docs/r/security-management/vulnerability-response/watchdog-configure.html?contentId=YJ830_4swhM19ptitzy7KA) - [Configure maximum rows in related list](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-max-rows-rel-list.html?contentId=ZvGrLqYfmSCHhEpmpy6Xmw) - [Advanced Vulnerability Response configuration tasks](https://www.servicenow.com/docs/r/security-management/vulnerability-response/setup-tasks-optional.html?contentId=UH~GNXX5ll~N6eZVkJaLOw) - [Create domain-separated imports for an integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-domain-separated-imports.html?contentId=8F1TDGceY7NJM0bODAXf5w) - [Create and support multiple domains in the background jobs framework](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-support-multiple-domains.html?contentId=hYBzT83_6F3TEJmXm6qHEA) - [Create a Vulnerability Response CI lookup rule](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-ci-identifier-rules.html?contentId=AsbX8k7MgranxIPOSa1iqw) - [Ignore CI classes](https://www.servicenow.com/docs/r/security-management/vulnerability-response/ignore-CI-classes.html?contentId=WIg8Mn7_Ati8G6Ubk1QiHQ) - [Filter decommissioned CIs](https://www.servicenow.com/docs/r/security-management/vulnerability-response/filter-decommissioned-ci.html?contentId=rSXlQbXWLVcutEMwt6FO8w) - [Auto-promote CIs](https://www.servicenow.com/docs/r/security-management/vulnerability-response/auto-promote-ci.html?contentId=Ip0lzCOhixKIN2tyeEVsVQ) - [Detection key configurations for Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/detection-key-configurations-for-vr.html?contentId=rc7GwZ2GGPFVuHhrhxylIw) - [Run detection key configuration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/run-detection-key-configuration.html?contentId=vUZYYb8JbmQtO1oOwWXPeg) - [Configure the vulnerable item key](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-configure-vi-key.html?contentId=pGBMsK02Q5UTOCU7IUTmKw) - [Adding proof to Rapid7 vulnerable item keys](https://www.servicenow.com/docs/r/security-management/vulnerability-response/add-proof-to-vi-key-rapid7.html?contentId=kOcdw2E0Do6skZPbmTij3w) - [Delete all your vulnerable item records and related data in Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-vi-key-returndefault.html?contentId=ijdCL2xRlxuUozfrGWi_vg) - [Filtering within Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-filtering.html?contentId=N7JtJGylkIXnkPI_eRbVGg) - [Severity mapping for Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vulnerability-response-severity-mapping.html?contentId=JmgFCyCNJB5hFaXEEiEF8w) - [Create a Vulnerability Response severity map](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-severity-map.html?contentId=yxFTSWgXTDlWRd1pFmwhyg) - [Define service classifications for Vulnerability Response reporting and related lists](https://www.servicenow.com/docs/r/security-management/vulnerability-response/define-service-classification.html?contentId=dg_Ln8DjdwbL_sq3rKIYPg) - [Audit selected fields in the vulnerable items table](https://www.servicenow.com/docs/r/security-management/vulnerability-response/enable-auditing-selected-fields-vuln-items-table.html?contentId=kS2bqKWqohpMx8dL3czIFw) - [Vulnerability Response background job framework configuration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-background-framework.html?contentId=FDX1Ivgj4_ZaNvF8SG9LMA) - [Define background job configurations in Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-configure-bckgrnd-frmwrk.html?contentId=EsU3oOqWGIbkeCaxfiqklg) - [Advanced parallel processing for background jobs in Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-adv-config-bkgrd-fmwrk.html?contentId=chojDjYi_K6LEqiJ26pHhA) - [Vulnerability Response integrations](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vuln_integrations.html?contentId=TDXyhOjUEOUomKoVntTPBg) - [AWS Integration for Security Exposure Management](https://www.servicenow.com/docs/r/security-management/vulnerability-response/aws-integration-for-security-exposure-management-overview.html?contentId=cQV_qlV~cLVC1smTm3Rjcw) - [Integrations](https://www.servicenow.com/docs/r/security-management/vulnerability-response/aws-sem-integrations.html?contentId=A0d2Ch~6qNJ0FvmoeztIpA) - [Set up requirements in AWS](https://www.servicenow.com/docs/r/security-management/vulnerability-response/aws-inspector-setup.html?contentId=ohxXx3DBvzaszmNAjYX3Sg) - [Install](https://www.servicenow.com/docs/r/security-management/vulnerability-response/aws-inspector-install.html?contentId=nFwUbNDAZGvKQf_W0pVOEg) - [Configure the integrations](https://www.servicenow.com/docs/r/security-management/vulnerability-response/aws-configure-inspector.html?contentId=_~r~FJipt2kpGvlDQm6c6A) - [AWS Inspector data filters](https://www.servicenow.com/docs/r/security-management/vulnerability-response/aws-inspector-data-filters.html?contentId=Q4BAwD8FY_GMaJYx0sSKqw) - [AWS Security Hub data filters](https://www.servicenow.com/docs/r/security-management/vulnerability-response/aws-security-hub-filters.html?contentId=vN6b3sUe4MFW2pXKv2SaVg) - [Reference](https://www.servicenow.com/docs/r/security-management/vulnerability-response/aws-inspector-sechub-ref-stub.html?contentId=lAaa~4FmaE_H1lCUQGOJ9A) - [AWS Inspector data mapping](https://www.servicenow.com/docs/r/security-management/vulnerability-response/aws-inspector-mapping.html?contentId=yglz8en4AlD5opZ0SDjQaQ) - [AWS Security Hub data mapping](https://www.servicenow.com/docs/r/security-management/vulnerability-response/aws-security-hub-mapping.html?contentId=PaDvK0C26533YEtx0fJkIQ) - [National Vulnerability Database (NVD) integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/nvd-vuln-integration.html?contentId=LXjTbQPOETD1Yv4G2Ib3dQ) - [Preparing for the NVD integrations](https://www.servicenow.com/docs/r/security-management/vulnerability-response/nvd-prerequisites.html?contentId=Hq0p02wZXPIwC0__2yao0Q) - [Configure and run the scheduled job for updating CWE records](https://www.servicenow.com/docs/r/security-management/vulnerability-response/t_ConfigureScheduledJobsCWE.html?contentId=LcKcft5E01Gycw_iwL08ug) - [Install the Vulnerability Response Integration with the NIST National Vulnerability Database](https://www.servicenow.com/docs/r/security-management/vulnerability-response/install-nvd.html?contentId=xauHkEdbpU5PA38XdVJ20g) - [Optional NVD integration modification and activities](https://www.servicenow.com/docs/r/security-management/vulnerability-response/nvd-optional-modifications.html?contentId=WalfTjcr163JNqkwvJ~Szw) - [Perform a manual NVD integration import](https://www.servicenow.com/docs/r/security-management/vulnerability-response/manual-nvd-import.html?contentId=qbgvJIfcLrDF8cC6ujiXGQ) - [View the (National Vulnerability Database) NVD integration import run status](https://www.servicenow.com/docs/r/security-management/vulnerability-response/nvd-check-imports.html?contentId=YWwH~RtbL9VkvqIQCF8zyw) - [Add CVEs to third-party entries](https://www.servicenow.com/docs/r/security-management/vulnerability-response/add-cve2thirdparty-entry.html?contentId=asNy2Ur96PtvTWpp5D9mSw) - [View Vulnerability Response vulnerability libraries](https://www.servicenow.com/docs/r/security-management/vulnerability-response/view-vuln-libraries.html?contentId=EnbC1mCFOlWSkIemsvJRJQ) - [SSVC enrichment for CVEs](https://www.servicenow.com/docs/r/security-management/vulnerability-response/nvd-ssvc-enrichment.html?contentId=7D0UNq0~Zly9E1zPM3RaoA) - [Integrations for Central Vulnerability Database](https://www.servicenow.com/docs/r/security-management/vulnerability-response/cvd-integrations-overview.html?contentId=FhXurnwzMb2x1H4i9Ii02Q) - [Central Vulnerability Database: versions and dependencies](https://www.servicenow.com/docs/r/security-management/vulnerability-response/cvd-versions-and-dependencies.html?contentId=1JXsCJprcCRsIEVV4WifSw) - [Activate the ENISA EUVD integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/cvd-activate-enisa-euvd-integration.html?contentId=GQSuKPYIG5kgMr1X_CXKSQ) - [Activate the Japanese Vulnerability Notes Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/cvd-activate-jvn-integration.html?contentId=LETneG1gxNOhLgqBQT_NZA) - [View the Integrations for Central Vulnerability Database Import Run Status](https://www.servicenow.com/docs/r/security-management/vulnerability-response/view-cvd-integration-run-status.html?contentId=YBjxJDdRdzEReEofksqwxQ) - [View Central Vulnerability Database vulnerability data](https://www.servicenow.com/docs/r/security-management/vulnerability-response/view-cvd-vulnerability-data.html?contentId=Sf4Mf6EN1EslllgfC1NrwQ) - [Roles and permissions for Integrations for Central Vulnerability Database](https://www.servicenow.com/docs/r/security-management/vulnerability-response/cvd-roles-and-permissions.html?contentId=~OcXZuZPhA9fTMnkiaIYzw) - [CISA Known Exploit Vulnerability (KEV) Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/cisa-vuln-integration.html?contentId=Pi_TFXW~Kf~GqvkdR7dJzw) - [Preparing for the CISA integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/cisa-prerequisites.html?contentId=F8GQhjBFqdkuVl6du94a2w) - [Install the ServiceNow Vulnerability Response Integration with CISA application](https://www.servicenow.com/docs/r/security-management/vulnerability-response/install-cisa.html?contentId=354J9NGb8VNtvQUH17Guig) - [Understanding the Exploit Prediction Scoring System (EPSS) integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/epss-vr-integration-overview.html?contentId=qTYdADEvMytp1cEhqJv_dg) - [Configure and run a scheduled job to update CVE records with EPSS data](https://www.servicenow.com/docs/r/security-management/vulnerability-response/config-schedule-job-update-cve-record-epss-data.html?contentId=kfV6z45RMJnNCq_LvuXM_g) - [Add EPSS Score condition in Risk calculator Business Rule](https://www.servicenow.com/docs/r/security-management/vulnerability-response/add-epss-score-condition-risk-calc-business-rule.html?contentId=CtExcLEvxevhkmRurZ8q8Q) - [Microsoft Defender Integration for Security Exposure Management](https://www.servicenow.com/docs/r/security-management/vulnerability-response/ms-defender-sem.html?contentId=jCkyCkL4DbfxYrPDC8xeUw) - [Microsoft Threat and Vulnerability Management](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mstvm-integration.html?contentId=XiyhVAYL0nrVi6WLRx8MDA) - [Prepare for installation and configuration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mstvm-prep-checklist.html?contentId=MNUejbugLqWw3pIxSZ1_Ew) - [Set up Microsoft Azure for the MS TVM integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mstvm-azure-account.html?contentId=zOzoXOy_N6FawHEILjenmg) - [Install and configure MS TVM integrations for Security Exposure Management](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mstvm-install-and-configure.html?contentId=XiBm1sGRySsn1thDokvW6A) - [Data retrieval settings](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mstvm-data-rerieve.html?contentId=u1mIyGefu8ze3df6c4s2eQ) - [REST messages](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mstvm-rest-msgs.html?contentId=8ZlnJJKrIOpX02s05wLYig) - [Data transformation](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mstvm-data-transformref.html?contentId=9mOppVObYZ~42Qj5RVFu5g) - [Integration run status](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mstvm-integration-run.html?contentId=x1dMEEZ0dYF~f1C8ndBO4g) - [Verify integration run status](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mstvm-view-import-run-status.html?contentId=nX3U1DmWwN_hr0F9XeGJxg) - [Split Microsoft TVM detections](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mstvm-split-detections.html?contentId=htlVeeRSt7shwFCNBKJNIw) - [Microsoft Defender](https://www.servicenow.com/docs/r/security-management/vulnerability-response/cc_asc_overview.html?contentId=HSAg6c02Q8pY2CHQ2XBgYg) - [Migrate to the Microsoft Defender Integration for Security Exposure Management](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mstvm-migrate.html?contentId=ylLLiC8RStihoU3dcWY8CA) - [Configure Defender for Cloud integrations for Security Exposure Management](https://www.servicenow.com/docs/r/security-management/vulnerability-response/cc_asc_install_configure.html?contentId=GS941e90dqcp2CgkRE9JuQ) - [Integration imports](https://www.servicenow.com/docs/r/security-management/vulnerability-response/cc-asc-policies.html?contentId=uIAsNHlqOSp4yimKoQS5Iw) - [Understanding the HCL BigFix patch orchestration integration with Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-bigfix-integration.html?contentId=URHSEk4fo2WRfgMcX1NgsQ) - [Integrations and dependencies of the Vulnerability Response Patch Orchestration integration with HCL BigFix](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-bigfix-integration-list.html?contentId=KVYu435N37NeTRstMMbnKQ) - [Prepare for the Vulnerability Response Patch Orchestration integration with HCL BigFix](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-bigfix-setup-checklist.html?contentId=kuhUN2j0rKd7BWF2_fB7xA) - [Install the Vulnerability Response Patch Orchestration with HCL BigFix application](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-bigfixinstall.html?contentId=vGr2qM68vBDgWhZfWz8LBQ) - [Configure the Vulnerability Response patch orchestration integration with HCL BigFix](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-bigfix-config.html?contentId=gfed0oB03n2eRnhk9Jc7xA) - [Viewing patch data for the Vulnerability Response patch orchestration integration with HCL BigFix](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-bigfix-rollup.html?contentId=v1fgkFKNytWPOYLHnosfSA) - [Schedule patches with the Vulnerability Response patch orchestration integration HCL BigFix](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-bigfix-schedule-patch.html?contentId=l8ZuljnM0BLk~wjWEkUi2g) - [REST messages for the Vulnerability Response patch orchestration integration with HCL BigFix](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-bigfix-REST-msg.html?contentId=lGANiJcSJDUNcmBqLiwyGw) - [Data transformation for the patch orchestration integration with HCL BigFix](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-bigfix-data-transform.html?contentId=9sikLV4GyoC_yiDoNXtxNw) - [Example workflow for the Vulnerability Response patch orchestration integration with HCL BigFix](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-bigfix-use-case.html?contentId=UCTTMRUsLWGIVrGHE0TOkg) - [Vulnerability Response patch orchestration integration with Microsoft SCCM](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mspatch-integration.html?contentId=hViI9ODvPR9SNW8vCn62Mw) - [Integrations and dependencies of the Vulnerability Response Patch Orchestration with the Microsoft SCCM application](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-mspatch-integration-list.html?contentId=gF~VmyxSdcCC9uxHjlnPgQ) - [Prepare for the Vulnerability Response patch orchestration integration with Microsoft SCCM](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-mspatch-setup-checklist.html?contentId=s_ILDtwWR81mnS0SXijTvg) - [Install the Vulnerability Response Patch Orchestration with Microsoft SCCM application](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-mspatch-install.html?contentId=K78FG0Rl3g~sk_SR~qBu~g) - [Configure Microsoft SCCM Patch Orchestration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-mspatch-config.html?contentId=fxI87Bz9pjQKFdSNWY56ew) - [Viewing patch data and patch data rollup for the Vulnerability Response Patch Orchestration integration with Microsoft SCCM](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-mspatch-rollup.html?contentId=4YnreMiz43RYcidd8bVasQ) - [Schedule patches with the Microsoft SCCM integration with Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-mspatch-schedule-patch.html?contentId=jX596Z~k2bsevYAp1wppiQ) - [REST messages for the Vulnerability Response Patch Orchestration with Microsoft SCCM](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-mspatch-REST-msg.html?contentId=Ad9g8MqzSXG9sbpmdEFgRw) - [Data transformation for the Patch Orchestration with Microsoft SCCM Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-mspatch-data-transform.html?contentId=7vkJ3Ma0H9ARMvHovdnh1g) - [Example workflow for the Vulnerability Response Patch Orchestration integration with Microsoft SCCM](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-mspatch-use-case.html?contentId=IdW9l7IGWlhhYKCNllKlhw) - [Understanding the Qualys Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/c_QualysVulnIntegration.html?contentId=6NM1jPL0t_i2nw7051W5CQ) - [Preparing for the Qualys Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/qualys-prerequisites.html?contentId=9W837L6WGuLGh8AM5dD_rg) - [Install the Qualys Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/install-and-configure-qualys.html?contentId=qa6xrqdADzQtGzNDMXalzg) - [Activate the Qualys scanners](https://www.servicenow.com/docs/r/security-management/vulnerability-response/activate-qualys-scanners.html?contentId=_JzInXSZ3D7yOk66XG5kcg) - [Installed components](https://www.servicenow.com/docs/r/security-management/vulnerability-response/qualys-installed-with.html?contentId=9kHM1bQxs51w3qClSqyITA) - [Update configuration items with the network partition identifier for the Qualys Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/qualys-updateCI-NPI.html?contentId=ekrbUizMVxI_NjAttFTCtw) - [Optional Qualys modifications](https://www.servicenow.com/docs/r/security-management/vulnerability-response/optional-modifications.html?contentId=oSlNwOXmdfaaqqX~BXrZpA) - [Advanced Qualys configurations and modifications](https://www.servicenow.com/docs/r/security-management/vulnerability-response/advanced-modifications.html?contentId=2fr_R2HSFDqpuvUs5BY~Jg) - [Qualys metadata for vulnerabilities](https://www.servicenow.com/docs/r/security-management/vulnerability-response/qualys-kernal-service-metadata.html?contentId=MZ8VBbANzRN6vMo2MQiTWw) - [Import additional metadata from Qualys](https://www.servicenow.com/docs/r/security-management/vulnerability-response/import-additional-metadata.html?contentId=B0Eoeptr0V0NILTABWwVLg) - [Qualys metadata values for vulnerabilities](https://www.servicenow.com/docs/r/security-management/vulnerability-response/qualys-metadata-values.html?contentId=EI8DWf3xrLHOEz7GFDBqrA) - [Set additional filter parameters for Qualys imports](https://www.servicenow.com/docs/r/security-management/vulnerability-response/qualys-add-filters.html?contentId=0019Cx9dAbQZu8W5~dKNaw) - [Resolving Qualys Vulnerability Integration issues](https://www.servicenow.com/docs/r/security-management/vulnerability-response/qualys-troubleshooting.html?contentId=Wi4~KSH7IL0U2XqXXeNY9w) - [Qualys Vulnerability Integration reporting](https://www.servicenow.com/docs/r/security-management/vulnerability-response/c_QualysHomepage.html?contentId=mih0~7fym64uWNp2JXywng) - [Qualys integration run status chart](https://www.servicenow.com/docs/r/security-management/vulnerability-response/qualys-integr-run-status.html?contentId=xNpo4Gl~5oKEg~xHjq6_9Q) - [Qualys data transformation](https://www.servicenow.com/docs/r/security-management/vulnerability-response/c_QualysDataTransformation.html?contentId=8Ckd2D5WztxNDa_x918Mlg) - [Dynamic Search List Import](https://www.servicenow.com/docs/r/security-management/vulnerability-response/qualys-dyn-srch-list-transform.html?contentId=dBkEdirJiv10aFuXTm~RZg) - [Static Search List Import](https://www.servicenow.com/docs/r/security-management/vulnerability-response/qualys-static-srch-list-import.html?contentId=vRtKKu1F9ayiU0oyMICllQ) - [Asset Group Import](https://www.servicenow.com/docs/r/security-management/vulnerability-response/qualys-asset-grp-import.html?contentId=xlUIrkX5aEA0OD~84flvpw) - [Appliance Import](https://www.servicenow.com/docs/r/security-management/vulnerability-response/qualys-appliance-import.html?contentId=N3XySSkOinAgb5K8EJ0G7Q) - [REST messages](https://www.servicenow.com/docs/r/security-management/vulnerability-response/qualys-rest-messages.html?contentId=XxteBylBlq2yul7VWl7u7g) - [Configure OAuth authentication for Qualys REST messages](https://www.servicenow.com/docs/r/security-management/vulnerability-response/configure-qualys-oauth-authentication.html?contentId=VeJj_ARbEsByG0SdzfHxKg) - [Split Qualys detections based on vulnerability instance](https://www.servicenow.com/docs/r/security-management/vulnerability-response/split-qualys-detections.html?contentId=TEsGET88~4Kmqlv~Vf05ZQ) - [Understanding the Rapid7 Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/r7-vuln-integration.html?contentId=iCCLYVs0v23DUvwp6yBaUA) - [Preparing for the Rapid7 Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/r7-prerequisites.html?contentId=5gdw2yAKegybvtJ8JaaTFw) - [Set up for the Rapid7 data warehouse Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/r7-setup-dw.html?contentId=WUomiVkv7hgni3oXONt7gA) - [Set up for the Rapid7 InsightVM Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/r7-setup-ivm.html?contentId=F5RNCjR6F2ud_vCSrvOTbw) - [Install the Rapid7 Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/install-and-configure-r7.html?contentId=6M86pLH0uEgsHl9qXiLUPg) - [Configure the Rapid7 Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/r7-config.html?contentId=~DD7TImePOy9HKNuo6f7TA) - [Filtering by Rapid7 sites](https://www.servicenow.com/docs/r/security-management/vulnerability-response/filtering-by-site.html?contentId=pxB63kYPWWVA9fad2TnbzA) - [Prepend SITE to your Rapid7 InsightVM site tags](https://www.servicenow.com/docs/r/security-management/vulnerability-response/prepend-site.html?contentId=Ufm3LSln3Kq6oL9uNH609Q) - [Deduplicate Rapid7 Vulnerability Integration data warehouse records](https://www.servicenow.com/docs/r/security-management/vulnerability-response/dedup-data-warehouse.html?contentId=a_Wp2XYeT1KDBg8KWApNug) - [Rapid7 Vulnerability Integration run status chart](https://www.servicenow.com/docs/r/security-management/vulnerability-response/r7-integr-run-status.html?contentId=j9flw6xd7pNBqPBSjotA2g) - [View the Rapid7 Vulnerability Integration import runs status dashboard](https://www.servicenow.com/docs/r/security-management/vulnerability-response/check-imports-rapid7.html?contentId=~CsrzkX1tPTPC5_NoVZzmw) - [Initiate rescan for the Rapid7 Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-r7-rescan.html?contentId=jUoakQgM~r31obcXqEheFg) - [Set additional filter parameters for Rapid7 InsightVM imports](https://www.servicenow.com/docs/r/security-management/vulnerability-response/r7-add-filters.html?contentId=RU1Ka1oadL0Nn2wyZ06o7g) - [Understanding the Shodan Exploit Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/shodan-exploit-vuln-integration.html?contentId=BCLjy9XDoAqaR6~nC7B_Wg) - [Preparing for the Shodan Exploit Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/shodan-exploit-prerequisites.html?contentId=9Anp8TzFNjSKevo86hXggw) - [Install and configure the Shodan Exploit Integration for Security Operations](https://www.servicenow.com/docs/r/security-management/vulnerability-response/install-shodan-and-configure.html?contentId=_e93LMYH~hdIuwyOr~Fqfg) - [Set Shodan Exploit Integration import time](https://www.servicenow.com/docs/r/security-management/vulnerability-response/set-import-time-shodan.html?contentId=OV7yCidcvpK7JTrzMUvdgw) - [Perform a manual Shodan exploit import](https://www.servicenow.com/docs/r/security-management/vulnerability-response/manual-shodan-import.html?contentId=RuoDJgL_JRyndQl_BajI_g) - [View the Shodan Exploit Integration import run status](https://www.servicenow.com/docs/r/security-management/vulnerability-response/check-imports-shodan.html?contentId=8FxEcKFomvTGxW8YcecEfA) - [Understanding the Tenable Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/tenableIntegration.html?contentId=zHZIcxqONj7gmmM7R6pzxg) - [Tenable.io integrations with the Vulnerability Response and Configuration Compliance applications](https://www.servicenow.com/docs/r/security-management/vulnerability-response/tenable-io-integrations-list.html?contentId=mcyCSnWaWyk1kPVLzSKuTg) - [Tenable.sc integrations with the Vulnerability Response application](https://www.servicenow.com/docs/r/security-management/vulnerability-response/tenable-sc-integrations-list.html?contentId=_LNgM1A0s_bWzOlhcRdbRA) - [Tenable.cs integrations with the Vulnerability Response and Container Vulnerability Response application](https://www.servicenow.com/docs/r/security-management/vulnerability-response/tenable-cs-integrations-list.html?contentId=Ta0IFSa1TH38MRDUHfgWPg) - [Preparing for the Tenable Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/tenable-setup-checklist.html?contentId=SqYssGXn1X98pcNgcLgXUg) - [Install the Vulnerability Response Integration with Tenable application using Setup Assistant](https://www.servicenow.com/docs/r/security-management/vulnerability-response/tenableInstall.html?contentId=A_VBXZdhITNS2X7S_E9X7Q) - [Data retrieval settings for the Tenable Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/tenable-data-rerieve.html?contentId=SFT7anok3Q5UeWGm4H22ow) - [REST messages for the Tenable Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/tenable-rest-msgs.html?contentId=xwlq0qaK9co_Pm7Px~Cm9w) - [Data transformation](https://www.servicenow.com/docs/r/security-management/vulnerability-response/tenable-data-transformref.html?contentId=QGSLiCOG3f42LDlz2zrkmA) - [Set import filters](https://www.servicenow.com/docs/r/security-management/vulnerability-response/tenable-add-filters.html?contentId=S6RzpI32dqrkOdbBvk0VtQ) - [Tenable Vulnerability Integration reporting](https://www.servicenow.com/docs/r/security-management/vulnerability-response/tenable-integration-reporting.html?contentId=Q1VVdogtpmPmYersRPf82A) - [Integration run status chart for the Tenable Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/tenable-integration-run.html?contentId=lq3bK8w5qN9Oo1yG6X56sA) - [Initiate rescan for the Tenable.sc integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-tenable-rescan.html?contentId=hbIQRwPfVQsU_OUS28o7aQ) - [Initiate rescan for the Tenable.io integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-tenable-rescan-tenable-io.html?contentId=233~qXmyNphhH0beIWqP3w) - [Update configuration items with the network partition identifier for the Tenable Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/tenable-updateCI-NPI.html?contentId=u3ry1T3ihnFqIIBEVtgDmw) - [Import modifications for the Tenable Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/tenable-optional-vul-modify.html?contentId=llJOPXBRm615IDethAwKQA) - [Split Tenable detections](https://www.servicenow.com/docs/r/security-management/vulnerability-response/tenable-split-detections.html?contentId=2M1HiAznymK0y6HyCDIfzw) - [Configure Test Result Granularity](https://www.servicenow.com/docs/r/security-management/vulnerability-response/cc-tenable-tr-granularity.html?contentId=KMbGobKrF3OHD5IQwVxCHQ) - [Compliance test uniqueness key](https://www.servicenow.com/docs/r/security-management/vulnerability-response/cc-tenable-compliance-test-uniqueness-key.html?contentId=nzUTfi1kF_5~6iREmXrcRQ) - [Configure compliance test uniqueness key](https://www.servicenow.com/docs/r/security-management/vulnerability-response/cc-tenable-config-test-uniqueness-key.html?contentId=I8T9gG1tZANKbrVBV4kiBQ) - [Understanding the Atlassian Jira integration with Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/jira-vuln-integration.html?contentId=szegvTCIWkSEaQtBx7iA_Q) - [Preparing for the Jira Vulnerability Response integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/jira-prerequisites.html?contentId=tckHT1yiqj7p0y9NGj5vQQ) - [Install the Vulnerability Response Integration with Jira](https://www.servicenow.com/docs/r/security-management/vulnerability-response/jira-install.html?contentId=OWpK~mfjaqDZ6cOoybIHyw) - [Configure rules in the agile tool configuration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/jira-configure.html?contentId=JWUwQyQlwPF7vbkXoTMUQA) - [Create agile issue manually using list action](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-agile-issue-manually.html?contentId=ppc_MLEWVlqrNJhopzFz7w) - [Create agile issue manually using form action](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-agile-issues-form-action.html?contentId=0m5xEMLGfURfh7GcAMNTfw) - [Manually synchronize the status of the Jira issue](https://www.servicenow.com/docs/r/security-management/vulnerability-response/sync-jira-issue-status-servicenow-manually.html?contentId=MvM9eSMWPkNkX6W4QDXxQw) - [Configure scheduler to create issues automatically](https://www.servicenow.com/docs/r/security-management/vulnerability-response/configure-scheduler-create-issues-automatically.html?contentId=QPdhFsnNPSNCDsD8d8AgPA) - [Configure scheduler to update issues automatically](https://www.servicenow.com/docs/r/security-management/vulnerability-response/configure-scheduler-update-issues-automatically.html?contentId=tRfaRu8BmVtKAoppVK7liQ) - [Configure scheduler to synchronize the Jira status to ServiceNow automatically](https://www.servicenow.com/docs/r/security-management/vulnerability-response/config-scheduler-sync-jira-status-vr-auto.html?contentId=4h52v7GZbVS6kTvSkS61nQ) - [Vulnerability Response Integration with Palo Alto Networks Prisma Cloud Compute integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-pcc-integration.html?contentId=wbgPQ9RCiZ1nHVhrEYHM6w) - [Preparing for the Vulnerability Response Integration with Palo Alto Networks Prisma Cloud Compute](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-prisma-prep-checklist.html?contentId=AZN8vWwBga5_aMzVrmjo5w) - [Install the Vulnerability Response Integration with Palo Alto Networks Prisma Cloud Compute](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-install-prisma-cloud-compute.html?contentId=_pfJH949Ulo_L1FSwYpXlA) - [Configure the Vulnerability Response Integration with Palo Alto Networks Prisma Cloud Compute application](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-prisma-install-and-configure.html?contentId=iYOu249SmiTxEKErpkF2TQ) - [Integration run status chart for Prisma Cloud Compute Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-prisma-integration-run.html?contentId=yF9AgBSR5Z47yfA6h9NS1Q) - [Wiz Vulnerability Response Integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-wiz-exploring-host-cf.html?contentId=mSgTuJr0INlzaZmvUp3hZA) - [Install](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-wiz-host-vuln-install.html?contentId=bwdqAezYjaQIryNM8ovAhg) - [Configure](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-config-wiz-host-vuln.html?contentId=d0Okp2tz7UBIEgtQScLr2g) - [Runtime exposure visibility for container images](https://www.servicenow.com/docs/r/security-management/vulnerability-response/wiz-container-runtime-exposure-cvr.html?contentId=KH3xkipviDRzU4SMl3rkWQ) - [Activate the Wiz Asset Integration and identify resource types for import](https://www.servicenow.com/docs/r/security-management/vulnerability-response/wiz-assets-resources-tab.html?contentId=1NyQUO1pm4vQl21ROckq2A) - [Filter host vulnerabilities](https://www.servicenow.com/docs/r/security-management/vulnerability-response/wiz-host-tab-filters.html?contentId=gs8Ye6Higb1aKbbh_1Pkqw) - [Filter container vulnerabilities](https://www.servicenow.com/docs/r/security-management/vulnerability-response/wiz-container-tab-filters.html?contentId=Z1imTFyuIXzpAsv8fCyUEA) - [Filter test results](https://www.servicenow.com/docs/r/security-management/vulnerability-response/wiz-test-result-tab-filters.html?contentId=lDIE1bbw7CvDWKHnjeBSpg) - [Filter issues](https://www.servicenow.com/docs/r/security-management/vulnerability-response/wiz-issues-tab-filters.html?contentId=qJM7PHsYRI7qDuClo6RzJg) - [Filter host test results](https://www.servicenow.com/docs/r/security-management/vulnerability-response/wiz-host-test-result-tab-filters.html?contentId=nX6iQWfizPGqs13samgj5A) - [Configure the Application List, SCA and Secret integrations](https://www.servicenow.com/docs/r/security-management/vulnerability-response/avr-wiz-config.html?contentId=Lv1Qyly1ECUJgGybqUeIvg) - [Use](https://www.servicenow.com/docs/r/security-management/vulnerability-response/wiz-activate-backfill.html?contentId=qLfUUIJ_pNZF15lQcHBOMQ) - [Field mapping](https://www.servicenow.com/docs/r/security-management/vulnerability-response/wiz-vul-resp-integration-view-findings.html?contentId=xrQbFXSiYDqt2S1XdIcazg) - [Manually create a vulnerability integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/c_VulnerabilityIntegrations.html?contentId=N8oP7pV3QkTRrR_uzFjMHg) - [Define a new vulnerability integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/t_DefineNewIntegration.html?contentId=m0~Tydld9qC4mp5x1FgB5g) - [Vulnerability integration script](https://www.servicenow.com/docs/r/security-management/vulnerability-response/c_AboutVulnIntegScript.html?contentId=smoY0bWWG51OxRWMRGavqQ) - [Single call integrations](https://www.servicenow.com/docs/r/security-management/vulnerability-response/c_SingleCallIntegrations.html?contentId=5Kr3Tvcwjp02o0I3dwRAPg) - [Multiple call integrations](https://www.servicenow.com/docs/r/security-management/vulnerability-response/c_MultipleCallIntegrations.html?contentId=hI8QPWCAf0IoNhIYBiNb5A) - [Attachments as retrieveData() return values](https://www.servicenow.com/docs/r/security-management/vulnerability-response/c_AttachmentsAsReturnValues.html?contentId=OcBwmnQpJAL0W7YXSdFyig) - [Report processor strategies](https://www.servicenow.com/docs/r/security-management/vulnerability-response/c_AboutRptProcStrategies.html?contentId=9nt7zFkKyBeMX~BXSG5y2w) - [Use the data source attachment report processor strategy](https://www.servicenow.com/docs/r/security-management/vulnerability-response/t_DataSrcAttachStrategy.html?contentId=I2fPi8mwUXqQCU3L2Bg_tA) - [About custom report processor scripts](https://www.servicenow.com/docs/r/security-management/vulnerability-response/c_AboutCustomRptProcScript.html?contentId=e6tkjfp94W~leqRFnAAjIQ) - [Integration factory script fields](https://www.servicenow.com/docs/r/security-management/vulnerability-response/c_AboutFactoryScript.html?contentId=kLXiakqcb_XlRP9jrqmy~g) - [Manually run a vulnerability integration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/t_ManualRunVulnInteg.html?contentId=50PNqcEqVRK7rlawjMc1vw) - [Manual ingestion of vulnerabilities](https://www.servicenow.com/docs/r/security-management/vulnerability-response/manually-ingest-vulnerabilities.html?contentId=zfeallJBHNark7_sBM2A7Q) - [Ingest vulnerabilities manually](https://www.servicenow.com/docs/r/security-management/vulnerability-response/ingest-vulnerabilities-manually.html?contentId=T2U7qSfPyE~GSd3xbUWkVg) - [Verify manual integration run](https://www.servicenow.com/docs/r/security-management/vulnerability-response/verify-manual-integration-run.html?contentId=1oVoAUqOuRcvdNUZMhzaUQ) - [Configure auto-close manual detections](https://www.servicenow.com/docs/r/security-management/vulnerability-response/configure-auto-close-manual-detections.html?contentId=GOhvzw0z21B2ffx_KwFVcQ) - [Verify upload status](https://www.servicenow.com/docs/r/security-management/vulnerability-response/verify-upload-status.html?contentId=vueh9TAL4llDQnjO2~BsoA) - [Template for manual ingestion of vulnerabilities](https://www.servicenow.com/docs/r/security-management/vulnerability-response/manual-ingestion-template.html?contentId=LwxuHuR3FGRzAzMxlrJTtA) - [Vulnerability Response remediation overview](https://www.servicenow.com/docs/r/security-management/vulnerability-response/cj-common-vuln-tasks.html?contentId=atsjLAZBiVYlmCh1uMsxVA) - [Verify successful completion of Vulnerability Response integration imports](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-integr-run-status.html?contentId=NwEkPSermxqzdEaEu6rWGw) - [View Vulnerability Response vulnerable item detection data](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr_view_detection.html?contentId=aKaV7EGclGIn4sKx2CfoJA) - [Verify Vulnerability Response vulnerable item detection data on integration run (VINTRUN) records](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr_host_integration_run.html?contentId=axs5G6f4_Gy6sQHDN8c2tA) - [Viewing patch data and scheduling patches in Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-patch-orch-view-data.html?contentId=rS7ltbcmRZBChFPVrqruGQ) - [Patch data and state rollup for patch orchestration in Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-patch-rollup-data.html?contentId=WiA8PJXdmvc~ZIEgzlnPEg) - [View patches without solutions in Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-patch-view-no-solution.html?contentId=bTLbMA1HvjZ_pYZ8mNspwA) - [Viewing patch orchestration data on the Vulnerability Response dashboards](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-patch-orch-dbs.html?contentId=MFWuCiDP0AbrkQCmu7yupg) - [View a solution](https://www.servicenow.com/docs/r/security-management/vulnerability-response/view-solutions.html?contentId=u1CbHuQN0oBKEZumMkVKSQ) - [Create a vulnerability solution](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-vul-solution.html?contentId=VEOEulgXQ8wHPBnJ21xPZw) - [Manually exclude solutions from third-party records or vice versa](https://www.servicenow.com/docs/r/security-management/vulnerability-response/exclude-solutions.html?contentId=WXvpnQtMpbnUDY6qhDdWFg) - [Triage vulnerabilities automatically](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vuln-automated-triage.html?contentId=eU~40AHnnMuqD_w8w_y3~Q) - [Edit vulnerable items in bulk in Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/bulk-edit-vis.html?contentId=GVs~9CjgZ6NPWgVu8s0Lfg) - [Ungrouped Vulnerability Response vulnerable items](https://www.servicenow.com/docs/r/security-management/vulnerability-response/ungrouped-vul-items.html?contentId=Czy_ivbO3qXlUrH8LM2FGA) - [View ungrouped Vulnerability Response vulnerable items](https://www.servicenow.com/docs/r/security-management/vulnerability-response/view-ungrouped-vul-items.html?contentId=Cjnr0lMWjyngRzzAkz~wjA) - [Manually add a vulnerable item to a remediation task](https://www.servicenow.com/docs/r/security-management/vulnerability-response/add-vul-item-to-group.html?contentId=X~tfuXDUY1SwH47nhiLdIg) - [Remove assignments from vulnerable items and remediation tasks](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-unassign-vi.html?contentId=Atext~MXIHG~ueF4opo9QA) - [Approve or reject an unassign request in Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-approve-unassign-requests.html?contentId=kLmfdpTFTSJ1foJLs4Ozyw) - [Automatic closing of vulnerable items and detections](https://www.servicenow.com/docs/r/security-management/vulnerability-response/auto-close-common.html?contentId=7xfnnowHQ0pDqk6MF6N3fA) - [Working with retired configuration items](https://www.servicenow.com/docs/r/security-management/vulnerability-response/working-with-retired-CIs.html?contentId=NLkxlBnkE4__K9v9desc5w) - [Automatically close vulnerable items related to retired CIs](https://www.servicenow.com/docs/r/security-management/vulnerability-response/auto-close-vis.html?contentId=j3N2Hq5y9I6HyJvhl92c7Q) - [Closing stale detections in Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-setup-autoclose-detections.html?contentId=YOrfawNqVe4KD_k0qGeLLw) - [Automatically close stale detections in Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-autoclose-detections.html?contentId=0ZNnycfKvggoTSXqpSOc1w) - [Create auto-close rules](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-auto-close-rules.html?contentId=ri5hA1482v2MsX4~7HBzug) - [Reclassify unclassed hardware](https://www.servicenow.com/docs/r/security-management/vulnerability-response/reclassify-unclassed-hardware.html?contentId=xoV017x~PbLavD7W3f1oTQ) - [Manually create a remediation task in Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-vulnerability-group.html?contentId=kSEAlAX1GSfObUzhtKcSeA) - [Add users to the Vulnerability Response group](https://www.servicenow.com/docs/r/security-management/vulnerability-response/t_SetUpVulnGroup.html?contentId=fE_3fQqrx0SQFE2cGNnh~Q) - [Manage individual vulnerable items manually](https://www.servicenow.com/docs/r/security-management/vulnerability-response/c_IndivVulnItemMgmt.html?contentId=8d7WYJrpBAZLX8opvSEN6Q) - [Create Vulnerability Response vulnerable items](https://www.servicenow.com/docs/r/security-management/vulnerability-response/t_CreateVulnerableItems.html?contentId=bBvz30Pq0kB8PHwjH6zAZA) - [Defer a vulnerable item](https://www.servicenow.com/docs/r/security-management/vulnerability-response/defer-vul-item.html?contentId=7aN_Twq82_NwLHTGe7v9fg) - [Request an extension for a deferred vulnerable item](https://www.servicenow.com/docs/r/security-management/vulnerability-response/extend-defer-vul-item.html?contentId=Jdz7kZMFWviHvlne41e2og) - [Refresh Vulnerability Response vulnerable items](https://www.servicenow.com/docs/r/security-management/vulnerability-response/refresh-vuln-items.html?contentId=yIevmF_FS~eEliApYVrR0g) - [Identify and escalate security issues in third-party software](https://www.servicenow.com/docs/r/security-management/vulnerability-response/escalate-sec-issue-3rdparty.html?contentId=n~FO0G4xVLSMMKI1zYtqYg) - [Identify and escalate security issues using NVD](https://www.servicenow.com/docs/r/security-management/vulnerability-response/escalate-sec-issue-NVD.html?contentId=CO5LWydQx~rZoT7Ezy~_Xw) - [Identify and escalate security issues using CWE](https://www.servicenow.com/docs/r/security-management/vulnerability-response/escalate-sec-issue-CWE.html?contentId=BFdQdAvwMmRTJHC3qm6S7w) - [View the remediation target status of a Vulnerability Response vulnerable item](https://www.servicenow.com/docs/r/security-management/vulnerability-response/view-remed-target-task.html?contentId=gxwBg3jklLXTdBK9tK02Dg) - [Working with unmatched CIs](https://www.servicenow.com/docs/r/security-management/vulnerability-response/working-unmatched-cis.html?contentId=8cPRZQIHxa9Uf_7dm4q8ew) - [View and reclassify unmatched configuration items](https://www.servicenow.com/docs/r/security-management/vulnerability-response/view-discovered-items.html?contentId=h_eDojNroRxmEpcljD0Q2Q) - [Reconcile unmatched discovered items](https://www.servicenow.com/docs/r/security-management/vulnerability-response/reapply-reconcile-unmatched-discovered-items.html?contentId=ErnRpv0aYv9vlaIydnQ_HQ) - [Reapply CI lookup rules on selected discovered items](https://www.servicenow.com/docs/r/security-management/vulnerability-response/reapply-ci-lookup-rules-di.html?contentId=8toIJ8v0Lv12PNmmJperPA) - [Reapply CI Lookup Rules Enhancements](https://www.servicenow.com/docs/r/security-management/vulnerability-response/reapply-ci-lookup-rules-enhancements.html?contentId=eQHGzSwTxVIzZ64nUe8I6Q) - [Steps to help prevent duplicate or orphaned records after running Vulnerability Response CI lookup rules](https://www.servicenow.com/docs/r/security-management/vulnerability-response/ci-identifier-rules-impl-test.html?contentId=DQVgSPBw2ZsxiTLFq35O7Q) - [De-duplicating existing configuration items](https://www.servicenow.com/docs/r/security-management/vulnerability-response/reapply-deduplication.html?contentId=hzq9j9OdIjKHYUkWw9U6cw) - [Resolve remediation tasks](https://www.servicenow.com/docs/r/security-management/vulnerability-response/remediate-vuln-groups.html?contentId=UBUKtU7C9YCO5Eu7QtyLLg) - [Defer a Remediation task](https://www.servicenow.com/docs/r/security-management/vulnerability-response/defer-vuln-group.html?contentId=EqZV~tJa1xxpcL~S1BPaRg) - [Request an extension for a deferred remediation task](https://www.servicenow.com/docs/r/security-management/vulnerability-response/extend-defer-vuln-group.html?contentId=j6Vc3tbLiRYMwBH525LeuA) - [Close a remediation task](https://www.servicenow.com/docs/r/security-management/vulnerability-response/close-vuln-group.html?contentId=oAenS6Xc5zkTSVaQ91Z8xg) - [Identifying duplicate vulnerable items from multiple scanners](https://www.servicenow.com/docs/r/security-management/vulnerability-response/correlate-vis-from-diff-scanners.html?contentId=2PQQYGfIw0lV6RKSiYbWXA) - [Automatically resolve duplicate vulnerabilities](https://www.servicenow.com/docs/r/security-management/vulnerability-response/automate-workflows-for-duplicate-vulnerabilities.html?contentId=arc1c7jqQM01OdLJYstlVw) - [Create and edit a classification group](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-edit-classification-group.html?contentId=lGIJn6hD6Qg0aR~x109MTA) - [Create and edit a classification rule](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-classification-rule.html?contentId=aKo6GwHUVnOcIN0HCK_qTw) - [Apply a rule to an existing vulnerability](https://www.servicenow.com/docs/r/security-management/vulnerability-response/apply-rule-existing-vulnerability.html?contentId=ynHsOcMPnWNcb8jyh6SpXg) - [Deactivate or delete a classification rule](https://www.servicenow.com/docs/r/security-management/vulnerability-response/delete-vulnerability-classification-rule.html?contentId=pMeKSar~buLV0XExfEk4xQ) - [Create an exclusion rule](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-exclusion-rule.html?contentId=sn0JwwcI08II~6oaLhpiUA) - [Change Management tasks for Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vuln_chg_mgmnt_tasks.html?contentId=0nkQsUGV4PrjicWwrZCpDg) - [Create a change request from a remediation task](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vuln-change_mgmnt_create_change.html?contentId=6u4DaP7P0x0X5CLKAwbzzw) - [Associate a remediation task to an existing change request](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vuln_change_mgmnt_associate_chng.html?contentId=jR4jdVW3gBw541YaRegq1Q) - [Split a remediation task](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vuln_change_mgmnt_split.html?contentId=6FBqi4W5T32birRV59eVlA) - [State synchronization between change requests and remediation tasks](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vuln_change_mgmnt_state_synch.html?contentId=y2X1S7mQL5CwwC_fzlKZ_g) - [Assess your exposure to vulnerable software](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr_sw_expsure_task.html?contentId=QZzgh9keDYUmw1Tm5Jam8Q) - [Viewing assignment recommendations](https://www.servicenow.com/docs/r/security-management/vulnerability-response/ml_view_assignment_recommendations.html?contentId=7nJMHmWtcEnzxLN_hADx3A) - [Request assignment group recommendations for a vulnerable item](https://www.servicenow.com/docs/r/security-management/vulnerability-response/ml-assignment-rec-for-vi.html?contentId=e1LORHQi6CmOXPjxWVs~cg) - [Request assignment group recommendations for multiple vulnerable items](https://www.servicenow.com/docs/r/security-management/vulnerability-response/ml-request-bulk-edit-vis.html?contentId=R4B9DsKMSIr_xcx31krfMw) - [Request assignment group recommendations for a remediation task](https://www.servicenow.com/docs/r/security-management/vulnerability-response/ml-request-bulk-edit-vg.html?contentId=9klnfkMpLC7ES9Ri1AC~dg) - [Requesting and approving an exception](https://www.servicenow.com/docs/r/security-management/vulnerability-response/request-approve-exception.html?contentId=JUESDgenHmI699oKyQkJPQ) - [Request an exception for a vulnerable item](https://www.servicenow.com/docs/r/security-management/vulnerability-response/raise-exception-vi.html?contentId=ZnMdkxGmlY1hzUCGHHlYYA) - [Request an exception for a remediation task](https://www.servicenow.com/docs/r/security-management/vulnerability-response/raise-exception-vg.html?contentId=i3ZkwPkScMEqhrFvKToKPw) - [Request a bulk exception](https://www.servicenow.com/docs/r/security-management/vulnerability-response/bulk-edit-ex-mgmt.html?contentId=IC_hX~DSrCe3EvYpeuua9A) - [Request an exception using GRC: Policy and Compliance Management](https://www.servicenow.com/docs/r/security-management/vulnerability-response/integration-with-grc.html?contentId=wJ~T5UPbgdR60Hy993llkA) - [Request a bulk exception using GRC: Policy and Compliance Management](https://www.servicenow.com/docs/r/security-management/vulnerability-response/bulk-edit-grc.html?contentId=JEi7X2QnF4_wJjZg_f9jlg) - [Approve or reject an exception request in Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/approve-ex-request.html?contentId=yBHjZw9MT7LQvy0bbpcplg) - [Working with an exception rule](https://www.servicenow.com/docs/r/security-management/vulnerability-response/working-with-exception-rule.html?contentId=tDCMgRKdQ1nLO0nbMEK3Iw) - [Create an exception rule](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-exception-rule.html?contentId=WoFOspGNouE0B28L7HVGXw) - [Approve an exception rule request](https://www.servicenow.com/docs/r/security-management/vulnerability-response/approve-ex-rule-request.html?contentId=t55gEAcqLRUF8OVAby3gvA) - [Activating an exception rule](https://www.servicenow.com/docs/r/security-management/vulnerability-response/activating-ex-rule.html?contentId=g0~c1yDelLm6wt1rK4TSMQ) - [Request an extension for an exception rule](https://www.servicenow.com/docs/r/security-management/vulnerability-response/extend-ex-rule-request.html?contentId=GAg6wanOX5HnWwRhB3YVPA) - [Reopen an exception rule](https://www.servicenow.com/docs/r/security-management/vulnerability-response/reopen-ex-rule.html?contentId=vxhSGCn~K9631qz8pBe93Q) - [Update an approved exception rule](https://www.servicenow.com/docs/r/security-management/vulnerability-response/update-approved-ex-rule.html?contentId=v0oQ8uJZx7qXtBBrplGhiA) - [Delete an exception rule](https://www.servicenow.com/docs/r/security-management/vulnerability-response/delete-ex-rule.html?contentId=9W6aNFlSDOqh9QrNVV0BMA) - [Marking and approving a false positive](https://www.servicenow.com/docs/r/security-management/vulnerability-response/request-approve-fp.html?contentId=LR6CU8dTUkGZ553o39_IGg) - [Mark as a false positive](https://www.servicenow.com/docs/r/security-management/vulnerability-response/raise-fp-request.html?contentId=TiWT~ahEX5g~_HCWvieKKg) - [Bulk edit for false positive](https://www.servicenow.com/docs/r/security-management/vulnerability-response/bulk-edit-fp.html?contentId=rMDHvIgK4My4jAJiN8VU_A) - [Approve or reject a false positive](https://www.servicenow.com/docs/r/security-management/vulnerability-response/approve-fp-request.html?contentId=JKlFYV0cdqkzZ0b6WJAqgA) - [Analytics and Reporting Solutions for Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/monitor-vuln-rem-prog.html?contentId=~FtGre6Y9cxizi5LDv~5~A) - [Using the default Vulnerability Response dashboards](https://www.servicenow.com/docs/r/security-management/vulnerability-response/c_VulnHomepage.html?contentId=oDAClz2BEHPYd7NUsV_yDg) - [Platform Analytics Solutions for Vulnerability Management](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vulnerability-mgmnt-content-pack.html?contentId=xqF7v159~oPEyKDw15N24g) - [Vulnerability Management CISO dashboard](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vulnerability-mgmnt-CISO-dashboard.html?contentId=kh2fXuFw5S5vgJJvJ01JUA) - [Configure the Scan Coverage reports](https://www.servicenow.com/docs/r/security-management/vulnerability-response/ciso-add-ci-class-to-scan-coverage-report.html?contentId=NAx8pTvjIVHpEqS5y6iqnQ) - [Configure the PA indicators for the CISO Dashboard](https://www.servicenow.com/docs/r/security-management/vulnerability-response/ciso-view-indicators.html?contentId=D6ToNI8EO1f7oVkIIKTAXA) - [SecOps Vulnerability Response Health dashboard](https://www.servicenow.com/docs/r/security-management/vulnerability-response/health-dashboard-overview.html?contentId=tYVrv3yW0MZ2EB1lyWYb6A) - [Modifying the threshold values](https://www.servicenow.com/docs/r/security-management/vulnerability-response/health-dashboard-threshold-val.html?contentId=d2F97zwRSXtPmN66lD376w) - [Vulnerability Management (PA) dashboard](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vulnerability-mgmnt-pa-dashboard.html?contentId=nsVOnmDfwR~nTRZDehyYrg) - [View Performance Analytics for Vulnerability Response [PA] reports in real-time](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr_real_time_report_PA_VR.html?contentId=pWBILpdYdL~KwCmz8ZQD8Q) - [View the Performance Analytics indicators for Vulnerability Response [PA]](https://www.servicenow.com/docs/r/security-management/vulnerability-response/view-pa-indicators.html?contentId=Y7Ba22CO5AEbXvlBOexf9g) - [Aggregated reports framework](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vulnerability-response-common-content-pack.html?contentId=z4lth2cTLiSB8PIIxrzVpQ) - [Configure an aggregation for source data](https://www.servicenow.com/docs/r/security-management/vulnerability-response/configure-indicator-for-source-data.html?contentId=jNgkGburrEkTS3NK56p71w) - [Run multiple aggregations simultaneously](https://www.servicenow.com/docs/r/security-management/vulnerability-response/run-multiple-aggregations.html?contentId=NUqXW9SEfjmZVqk4Z6VMLA) - [Configure the number of aggregations that can run simultaneously](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-config-arf-processor.html?contentId=m24pRZqS4tTP4UmeV7Xo2g) - [Create a report using an aggregation](https://www.servicenow.com/docs/r/security-management/vulnerability-response/generate-report.html?contentId=pgQzXeuyIdi0rBPdu2tW6Q) - [Vulnerability Response reference information](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-reference-info.html?contentId=TPXNW_vEYcdyrfJDfsD7Ng) - [Implementation checklist for the Vulnerability Response application](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-implement-chklist.html?contentId=p~aLUilOObaqQaT_7jZg7g) - [Vulnerability Response remediation task states](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-rt-states.html?contentId=EF7OYAVNJPrIyi_ArWmBig) - [Detections, remediation tasks, and vulnerable item states](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-detections-rt-vi-states.html?contentId=EpP_e4zeViL8nOypesjnyQ) - [Remediation tasks and vulnerable item states](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-rt-vi-states.html?contentId=JNsDGL7yMtXrWUQ8WWLBXA) - [State roll-up and roll-down scenarios](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-state-rollup-rolldown.html?contentId=mYGHZjnmpWPDZuymVpjRvA) - [Remediation task state for Vulnerable Items (VITs) in multiple groups](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-rt-state-for-multi-grp-vi.html?contentId=5xz~Gg5EdN4uIqa9ADJmLA) - [Additional settings for domain separation](https://www.servicenow.com/docs/r/security-management/vulnerability-response/ds-additional-config.html?contentId=TzA9FJSHMsQjBC2X5XsOrg) - [Discovered Items form fields](https://www.servicenow.com/docs/r/security-management/vulnerability-response/discovered-items-fields.html?contentId=2_xfsWHL1HIuIwRic2AIyA) - [Vulnerability Response vulnerability form fields](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vulnerability-fields.html?contentId=X4z2Bim2wEDbSugr_6zb5Q) - [Remediation target rule fields](https://www.servicenow.com/docs/r/security-management/vulnerability-response/sem-rt-rules-fields.html?contentId=7MGU1n0RQS81LVpoB7gXRg) - [Remediation task form fields](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vulnerability-group-fields.html?contentId=u83W45vZyvoFuUpsSgxkRw) - [Questionnaire Configuration form fields](https://www.servicenow.com/docs/r/security-management/vulnerability-response/compensating-controls-approval-rule-new-record-form.html?contentId=y49nnnnj9SFOREFLxg8hqA) - [Vulnerability Response vulnerable item form fields](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vulnerable-item-fields.html?contentId=RbTEQMr3yFt7mXzfn9USaQ) - [Solution form fields](https://www.servicenow.com/docs/r/security-management/vulnerability-response/solution-fields.html?contentId=4tHu0dKdxMNOQxmmOQ1fBg) - [Approval workflow configurations for unassign request](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vr-unassign-approval-rules.html?contentId=Y4sjYkKGUGJMfygLs5e4Iw) - [Vulnerability Response remediation task rule examples](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vul-group-rules-examples-v10.html?contentId=W3u7FSYIfhpq09z6VjNjGg) - [Risk score calculation example for Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/vuln-calc-risk-rule-example.html?contentId=j3Hs~yIegfei7~vgNMbfhQ) - [Error handling for detections](https://www.servicenow.com/docs/r/security-management/vulnerability-response/detections-error-handling.html?contentId=i0X8iziA_oP3UZyncWXudQ) - [Mobile experience for Vulnerability Response](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mobile-vr.html?contentId=5Gz1xr6rGZH8zYPyBQAWsQ) - [Set up checklist for the Vulnerability Response Mobile app](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mobile-vr-setupinstll-mobile.html?contentId=Tn4ILobjnqL7JaAZlFWjpA) - [Log in to the Vulnerability Response Mobile app](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mobile-vr-login-mobileapp.html?contentId=MuCtsNn1kuyJU2iQRgj2Ew) - [View, assign, and edit remediation tasks with the Vulnerability Response Mobile app](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mobile-reassign-vg.html?contentId=HcFLg0l_vhBoJPnuLdIXnA) - [View, reassign, and edit remediation tasks assigned to you with the Vulnerability Response Mobile app](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mobile-vr-yourvg-vis.html?contentId=vsnOv3JPr2TQ2lVc596mYg) - [Search for remediation tasks with the Vulnerability Response Mobile app](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mobile-vr-search-vgs.html?contentId=aKWVrv2cwUTdqrE9Qo~GTQ) - [Filter records with the Vulnerability Response Mobile app](https://www.servicenow.com/docs/r/security-management/vulnerability-response/mobile-filter-records.html?contentId=x2S2QldEYUMx3RoppcqXbg) - [Vulnerability Response Orchestration](https://www.servicenow.com/docs/r/security-management/vulnerability-response/c_VulnRespOrchestration.html?contentId=Qal5QbJX_BXyENAHZL75Ag) - [Scan vulnerability workflow](https://www.servicenow.com/docs/r/security-management/vulnerability-response/scan-vulnerability-workflow.html?contentId=iFbglfAfDu6zntVJGKgy8A) - [Scan vulnerability item workflow](https://www.servicenow.com/docs/r/security-management/vulnerability-response/scan-vulnerable-item-workflow.html?contentId=qLJIdzCwy0GcURLDZLQkKQ) - [Variables for Create Scan Record for Vulnerabilities activity](https://www.servicenow.com/docs/r/security-management/vulnerability-response/create-scan-record-for-vuln-activity.html?contentId=oAXApbowvdqaQ4me9BbIBw) - [Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avr-landing.html?contentId=fk_loKHx4VyQMt1B26~VGg) - [Explore](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/app-vuln-mgmt.html?contentId=2KAiV9vukxKItYWdfkuWRA) - [Configure](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-configuring.html?contentId=Xu61W0RtkskQTGICBi3hAA) - [Configure Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/configure-avm.html?contentId=4tWlONTjFibn5SSTWBL2qQ) - [Verify that the scheduled job for updating CWE records is running](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-verify-CWE-sched-job.html?contentId=sBsjOxIjmOU1eGduIeOcbg) - [Verify that the scheduled job for updating NVD records is running](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-verify-NVD-sched-job.html?contentId=__ZHZvdI_lxzyj1k0skmDA) - [Install](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-activate-integrations.html?contentId=GXvOyQE7WL~ZIYYQfhg~eA) - [Define Application Vulnerability Response email notifications](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avr-define-email-notifications.html?contentId=MQ~At4I65D95O4yQSIg9hQ) - [Create or edit remediation target notifications in Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avr-create-remediation-notification.html?contentId=znJ3LWXCaBn54Mxx9_hyJA) - [Exception Management in Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avr-exception-management.html?contentId=4436kvURrWyhU~u6TH3TfQ) - [Configure Exception Management for Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/configure-exception-management-application-vulnerability-response.html?contentId=vpHJ75wB4JONaaCkbCq4LQ) - [Configure approval rules for Exception Management](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avr-exception-mgt-approval-rules.html?contentId=lGZzX~9FldKsn83t5hS62w) - [Deferring remediation in Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/aws-defer-awaiting-implementation.html?contentId=O1fi446WRZIAREZsnOD3VQ) - [Add an exception approver for Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avr-add-exception-approver.html?contentId=24e5bfDwdz22xv83qsQEww) - [Requesting and approving an exception in Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avr-request-approve-exception.html?contentId=6wkvv8p0brTl7sT7ijtTfg) - [Request an exception for an application vulnerable item](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avr-raise-exception.html?contentId=v67V2xbvzn_3dnubDeea9Q) - [Request an exception for application vulnerabilities using GRC: Policy and Compliance Management](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/integrate-with-grc-avr.html?contentId=5y6UxqgeDC1~5lIWSEST2Q) - [Request an exception for an application remediation task](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/raise-exception-art.html?contentId=a7JZBHbyowJ9EQbm~jv93Q) - [Approve exception rules and exception rule extension requests in Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avr-approve-ex-request.html?contentId=jArtnuHJGOqss1lb9aOB7Q) - [Define policy reason mapping](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/define-policy-reason-mapping.html?contentId=NK0A4r2MqwJiWG1Ld9JpEQ) - [Request an extension for an exception rule in Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/extend-ex-rule-request-avr.html?contentId=aVSIEGBF6p1zIlsEc93ehA) - [Request an extension for a deferred remediation task in Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/extend-defer-app-vuln-group.html?contentId=7StUCClBiQlELTydChyHrg) - [Request an extension for a deferred application vulnerable item in Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/extend-defer-app-vul-item.html?contentId=SM9eAskhgzFsHqC3huduyA) - [Create, delete, and cancel an exception rule for Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-create-exception-rule.html?contentId=new794OSsEjMX2tJ3d~~qg) - [Application Vulnerability Response remediation tasks and task rules overview](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-rt-rt-rules-overview.html?contentId=bR8ZpPo_urYejFR84cznCg) - [Create, edit, and delete Application Vulnerability Response remediation task rules](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-create-rt-rule.html?contentId=UOSY3nOVjm_EqitAVKRJzw) - [Create an application remediation task manually in Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avr-create-rt-manually.html?contentId=jhVUXhVdY2r2z~qqA4uk5A) - [Create auto-close rules](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avr-create-auto-close-rules.html?contentId=~J5PYHFUM4GSsbta6O3zYQ) - [Configure penetration testing](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/pen-test-config-v16-1.html?contentId=noH5adhr8opdHyYsg6SNMA) - [Configure sprints](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/pen-test-config-sprints.html?contentId=zl54jXddlq_7e9Wg3LUUwA) - [Configure assessment types](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/pen-test-config-assessment-types.html?contentId=0XUp_GKdmGEGxCYew1yhDA) - [Integrate](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-integrations.html?contentId=UehoSDgCiqP7PcLy4praeA) - [Vulnerability Response Integration with Black Duck](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/blackduck-integration.html?contentId=u8no6PeLmIlv5FmqBMNPCQ) - [Prepare pre-integration tasks for Vulnerability Response Integration with Black Duck](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/blackduck-prerequisites.html?contentId=SJwiAIghz4wQ_ezy7_x_Xw) - [Install the ServiceNow Vulnerability Response Integration with Black Duck](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/install-blackduck.html?contentId=aOHGdKDYa_GPuxdJtfOD~w) - [Configure the Vulnerability Response Integration with Black Duck](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/configure-blackduck.html?contentId=WoKP2St5j9GYGIq~fOiltg) - [View the Vulnerability Response Integration with Black Duck import run status](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/blackduck-vuln-check-imports.html?contentId=KIgYm5uPYYfIiZQuNMIQNw) - [Data transformation for the Vulnerability Response Integration with Black Duck](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/blackduck-data-transformref.html?contentId=VVWANUV4qqsEJaQpErGY8g) - [Import the project information from the Black Duck integration instance](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/blackduck-integration-activities.html?contentId=pXqJMwBrKCQt5ofcsASnWA) - [Import Vulnerability Response Integration with Black Duck project versions to the Discovered Applications table](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/blackduck-integration-activity-application-list-integrtn.html?contentId=NgfC7d_JaDETX533cJwfYQ) - [Import the application vulnerable items from the Vulnerability Response Integration with Black Duck](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/blackduck-integration-activity-application-vulnerable-item.html?contentId=am1nPlmgXlSBKD~T6QrxSg) - [Set the import times for the Vulnerability Response Integration with Black Duck](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/set-import-time-blackduck.html?contentId=HJhR4G0xMYRFcZIxSlCtjA) - [Include Closed Black Duck application vulnerable items](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/include-closed-avits-blackduck.html?contentId=iCQpvwCMAMIuz~esuECBEg) - [Fortify Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/fortify-vuln-integration.html?contentId=kUCfGgpvZxoFwgxy4jBqcA) - [Preparing for the Fortify Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/fortify-prerequisites.html?contentId=a3j8PTGO7jCsuRUQLVaw4A) - [Install the ServiceNow Vulnerability Response Integration with Fortify](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/install-fortify.html?contentId=LKf01E84Gn1GPF8YnxEnug) - [Configure the Fortify Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/configure-fortify.html?contentId=AldqmgS~eBRNqxmsm3joXw) - [View the Fortify Vulnerability Integration import run status](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/fortify-check-imports.html?contentId=f~1324WCRfgxOrU10xGD5A) - [Fortify Vulnerability Integration modification and activities](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/fortify-optional-modifications.html?contentId=skjCyGT0jSOyKHrvruVvzQ) - [Perform a manual Fortify application vulnerability import](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/manual-fortify-import.html?contentId=xPlsPzWVLxatd1OJGqnX0g) - [Import data using the Fortify Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/set-import-time-fortify.html?contentId=v169iTNCdcoH9kk4FlXVrQ) - [Include Closed Fortify on Demand application vulnerable items](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/include-closed-avits-fortify.html?contentId=3r1conB7zqOqcKbNV91Nvw) - [GitHub Application Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/github-vuln-integration.html?contentId=HgGsTwEbT9RCQ76~J5tPcA) - [Setup tasks](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/github-vuln-prerequisites.html?contentId=RPcvCUJ6D9x_8P_WlOMyaw) - [Creating OAuth 2.0 credentials for GitHub Apps - JWT for the GitHub Application Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/github-app-vuln-apps-oauth-jwt.html?contentId=RIyhVviWRsEWDvZAfURz6Q) - [Install](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/install-github-vulnerability.html?contentId=PkCIy1C5qakXbX1ZUYlNIw) - [Configure](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/configure-github-vulnerability.html?contentId=U9HExx_IE5FqNVMQ8PqYIw) - [View import run status](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/github-vuln-check-imports.html?contentId=suGIf7ImM5RFU32EvE3cRw) - [View import sets](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/github-vulnerability-scan-summary.html?contentId=B1XOHLRa5_rpyPE2XSxS~w) - [Field mapping](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avr-github-vuln-mapping.html?contentId=kSRw8JBeO4oOf_WZ0LSE7w) - [Invicti Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/invicti-vuln-integration.html?contentId=YYjpMBHLS~PBmIs9krKGNw) - [Prepare for the Invicti Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/invicti-prerequisites.html?contentId=JEp4bR2~40SfbuHqct67JQ) - [Install the ServiceNow Vulnerability Response Integration with Invicti](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/invicti-install.html?contentId=36wqwWG~LjwpJC5ILHqCfw) - [Configure the Invicti Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/invicti-configure.html?contentId=TDsUGPpdVvI21gQWGZJDNw) - [Viewing the Invicti Vulnerability Integration import run status and records](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/invicti-check-imports.html?contentId=ty2qIFz~VqXLuT5F~dTdvw) - [Invicti Vulnerability Integration state mapping](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/invicti-mapping.html?contentId=SaP9y7YINISFAxlo3SAVTA) - [Veracode Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/veracode-vuln-integration.html?contentId=GMsy~5enDtLYjPIsqErTtQ) - [Preparing for the Veracode Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/veracode-prerequisites.html?contentId=8M~Fl8qgKekVC3wvvlfZsQ) - [Install the ServiceNow Vulnerability Response Integration with Veracode](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/install-veracode.html?contentId=8wk_Zymr867wM15pRGmUnw) - [Configure the Veracode Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/configure-veracode.html?contentId=s7bHYHeYXAjsM42EZlCpkg) - [View the Veracode Application Vulnerability Integration import run status](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/veracode-check-imports.html?contentId=OEb~ARbZ4VmBWo7fWkOSQA) - [View Veracode scan summaries](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/veracode-scan-summary.html?contentId=D1~Wx7vqoHaHiPwMoyMkWQ) - [Data transformation for the Veracode Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/veracode-data-transformref.html?contentId=PQgxxVmyrVicljIdFaRKzg) - [Veracode Vulnerability Integration modifications and activities](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/veracode-optional-modifications.html?contentId=Hy6uK4DkM87xtl~R8KxzMQ) - [Wiz Vulnerability Response Integration](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/wiz-exploring-avr-sca-secrets.html?contentId=lJZeeilduzd_PIyIItEPug) - [Manual ingestion of vulnerabilities for Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/manual-ingestion-of-vulnerabilities-for-application-vulnerability-response.html?contentId=VBt3pYdr8rZPpJMFHpAI3Q) - [Upload application vulnerabilities using a template file](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/ingest-vulnerabilities-manually-avr.html?contentId=XVJFEkd~B~1NqzlgWH5QqA) - [Verify integration run](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/verify-manual-integration-run-avr.html?contentId=prYX3kOsEBaJjP9PknL2~A) - [Verify upload status](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/verify-upload-status-avr.html?contentId=N6TcrdiJ8g~Du~2UbktaVA) - [Tenable Web Application Scanning Vulnerability Response Integration](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/tenable-was-integration.html?contentId=Y3kfkswbzMsUnqxW2Xr8Dw) - [Configure Tenable Web Application Scanning Vulnerability Response Integration using Setup Assistant](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/configure-tenable-was-integration-using-setup-assistant.html?contentId=viIomNtJgL9ewF2UTXpRBw) - [Import Applications Data from Tenable Web Application Scanning Vulnerability Response Integration](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/import-applications-data-from-tenable-was.html?contentId=~4XWG7Q7sIbwCwYpGGgziA) - [Import Vulnerabilities Data from Tenable Web Application Scanning Vulnerability Response Integration](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/import-vulnerabilities-data-from-tenable-was.html?contentId=kY24Lt1zatPj~iAfGusUEg) - [Use](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-monitor-rem-prog.html?contentId=CkoRqQj73gLfhZlhKqWxQg) - [View vulnerability libraries](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-view-vuln-libraries.html?contentId=dlfytX1MOrua3tc1QLMkaw) - [Application Vulnerability fields](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-vulnerability-fields.html?contentId=so1tHrmzFsXp_3Ln~QmM_Q) - [Identify applications in Application Vulnerability Response automatically](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-ci-lookup-rules.html?contentId=cf_opwKi~Hsi1udfLbgxMg) - [Create a CI lookup rule](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-create-ci-lookup-rules.html?contentId=TZDzKQOcG9Hg~9C2lbE4dg) - [Reapplying CI Lookup rules in Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avr-reapplying-ci-lookup-rules.html?contentId=lji3Sr1lhykCqTNnY3cVSg) - [Prevent duplicate or orphaned records after running Application Vulnerability Response CI lookup rules](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-ci-lookup-rules-impl-test.html?contentId=TJ63WoOKs1klVbSBPvDhLQ) - [Assign application vulnerable items in Application Vulnerability Response automatically](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-assignment-rules.html?contentId=D4xnDO2SeHzpwQBTntm_Gw) - [Create or edit Application Vulnerability Response assignment rules](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-create-assign-rules.html?contentId=u8jsnPzRwr1FoYHR01N0~w) - [Removing assignments from Application Vulnerability Response vulnerable items and remediation tasks](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/unassigning-avits.html?contentId=nqGex03AozxBRKotw50WWQ) - [Calculate risk in Application Vulnerability Response automatically](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-calculators-rules.html?contentId=6p4vfSCU74muDOc45Ob2BQ) - [Define fields and weights for the risk rule](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-vuln-calc-define-risk-rule-fields.html?contentId=qqlPWvE4sFgHmN~k32YkYQ) - [Create an application vulnerability calculator](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-create-calculator.html?contentId=D9kQdl71rJKJ_atkjwt72A) - [Map the severity of an application vulnerable item automatically](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-create-severity-map.html?contentId=aJemd8geH2fS0rGeXZ2zTg) - [Filtering within Application Vulnerability Management](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-filtering.html?contentId=H581MmOkhrYcE0yR9GeBjQ) - [Automate remediation target tracking in Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-time-to-remediate-rules.html?contentId=~2SKlOBT1n0DQVkv1JBc8g) - [Create or edit application remediation target rules](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-create-time-to-rem-rule.html?contentId=XW_qlLMq85X2J3qvOuS~Fg) - [View the remediation target status of an application vulnerable item](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-view-remed-target-task.html?contentId=VbItETFxtdADskuglkGDkg) - [Close a remediation task](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avr-close-remediation-task.html?contentId=HidJTjKKYSC5mKgEGep3OQ) - [Change Management for Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/app-vul-change-management-overview.html?contentId=5e0D6QUqRiXY_3vKTdTw7A) - [Create a change request for Application Remediation task](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/create-change-request-app-vuln.html?contentId=wgGmH4HMMho2ob0yBp5rjA) - [Associate a remediation task to an existing change request](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/associate-change-request-app-vuln.html?contentId=caVIsyAMldv700q~b8vEIA) - [Penetration testing](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/pen_test_overview_avm.html?contentId=iaUByhnNMj2R6nkv5Ji0zg) - [Configure a penetration test assessment request from existing requests](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/pen-test-create-from-list.html?contentId=nNUC8pKExgNuMt4bnHLIjw) - [Create a penetration test assessment request (prior to v19.0)](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/pen-test-create-request-avm.html?contentId=4GTBuNGHbgH~Q17dbabgkQ) - [Replicate a penetration test request in closed state](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/pen-test-copy-create-request.html?contentId=lx7DbMQZe09jQ3KipeeV6Q) - [Create penetration test findings based on assessment requests (prior to v19.0)](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/pen-test-create-avi.html?contentId=o8r_e4eJRcTATh9epiOcXQ) - [Create an application vulnerability entry](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/pen-test-create-app-vul-entry-avm.html?contentId=2F0pYA8DBS2_YU2l0qX1Bw) - [Penetration Test Workspace](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/pen_test_workspace_avr.html?contentId=gpL~tpZmQ4rV5FIZICTjng) - [Create a penetration testing assessment request](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/create-new-pen-test-assesment-req.html?contentId=jjRkz6A3dFnGaa~SEYbGXQ) - [Create penetration test findings based on an assessment questionnaire](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/create-penetration-test-findings.html?contentId=WCE9m_NkVHg~7Ri1hFz7bQ) - [Publish the assessment questionnaire](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/publish-the-assessment-questionnaire.html?contentId=12HIkkZuOYv1Rt4zj7isqA) - [Use an assessment questionnaire](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/use-assessment-questionnaire.html?contentId=RRjs1D2izan~9iIsdk0h3Q) - [Penetration Testing Dashboard](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/penetration-testing-dashboard.html?contentId=~OijxkoQT8lsvA_5ZyczCA) - [Penetration Dashboard components](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/pen_test_dashboard_components.html?contentId=bpO3z3Ska6rSYbSWurnoGg) - [Analytics and reporting](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/app-vuln-mgmnt-content-pack.html?contentId=SnqVdBoZ8hdmNFaqppdOyA) - [Application Vulnerability Management (PA) dashboard](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/app-vuln-mgmnt-dashboard.html?contentId=CLts5u1yt6os1GlWASr09w) - [My Application Vulnerabilities dashboard](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/app-vuln-mgmnt-secchamp-dashboard.html?contentId=p8ahxksC6s~TFQ2R6h6Fpw) - [Aggregated reports framework for Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/vr-common-content-pack-avr.html?contentId=fcY6goDbiuSnVzxRHqWHdg) - [Reference](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-references.html?contentId=UJx5gliGv~1QslKnnRnFHA) - [Application Vulnerability Response user groups and roles](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-manage-roles.html?contentId=AKkBpN3GiJ16PNiM9IIHlw) - [Components installed with Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/installed-with-avm.html?contentId=pjsvNLF2157IgyVMfewKnw) - [Application Vulnerable Item (AVI) states](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-states.html?contentId=blaN5EW2_HYYjTEyZ62ofA) - [Application Vulnerability Response remediation task rule examples](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-remediation-task-examples.html?contentId=gKuXqkqCGCRNyF7OIKkUuw) - [Scanned application fields](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-scanned-app-fields.html?contentId=_B24V8UQnDLHl7b4p3Ae3w) - [Application Vulnerable Item fields](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-vul-items-fields.html?contentId=ghtKrORVHXGlzGehyUFMoA) - [Penetration testing states](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/pen_test_state_avm.html?contentId=LmljYEZwu5bTC6vVM~Scdg) - [Managing state mapping for deferrals and false positives in Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-excep-fp-triage-mapping-example.html?contentId=NZ4ZqQeUyhgSzUkXhwEUwA) - [Application Vulnerability Response references](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avr-references.html?contentId=~FSi1Jv4tdhVqbULk3B4uw) - [Exception rule example for Application Vulnerability Response](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avm-exception-rule-example.html?contentId=Ml42IWSuiKYqRfqAzdTxiQ) - [Product view](https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avr-product-view.html?contentId=Nddaqm7Ttt5V0sNpsEIkVw) - [Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-landing.html?contentId=jqLnFSfDQKfMEZ24BCt73w) - [Explore](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/exploring-cvr.html?contentId=m6ZtGTq2PSJH2KCQiNkPcQ) - [Container Vulnerability Response remediation task and container vulnerable item states](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/container-vulnerabillity-states.html?contentId=XXUn~PeJhBYUDid0_s_lqw) - [Configure](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/configure-cvr.html?contentId=gTUIxzwcbZrCGYhbMGTWOg) - [Install](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/install-and-configure-cvr.html?contentId=RBni5Q_iNK0zAqlx9NTDqQ) - [Configuring granularity keys](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-configuring-findings-key-granularity.html?contentId=9MOVVaY4BFr5jWhlG9b3uQ) - [Configure granularity keys](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-configure-key-granularity.html?contentId=vnORlz5ZwPy3A90POe5fOg) - [Define Container Vulnerability Response email notifications](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-define-email-notifications.html?contentId=3EhSu7jkb8mm7TB~XLG0xw) - [Create or edit remediation target notifications](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-create-remediation-notification.html?contentId=qeOK7tkLTUrhjXBmlhdVgg) - [Configure Exception Management for Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/configure-exception-management-for-container-vulnerability-response.html?contentId=bTMvfpaMCaCrjFj64_fJVQ) - [Configure approval rules for Exception Management](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-exception-mgt-approval-rules.html?contentId=XsgP8MzoBUIxEulqbay~jw) - [Quick start tests for Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/quick-start-tests-cvr.html?contentId=Y8DFmihw4wT2N835hoYeRQ) - [Run the Automated Test Framework (ATF) test suite for Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-run-vr-atf-suite.html?contentId=pyJ_YNASmkrpyi5AzI2m0g) - [Integrate](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/integrate-cvr.html?contentId=MSxOru7ntxcyqHRDzunehw) - [Vulnerability Response Integration with Palo Alto Networks Prisma Cloud Compute integration](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/pcc-integration.html?contentId=D2gp11G9fy_LfTE1Ylea8Q) - [Preparing for the Vulnerability Response Integration with Palo Alto Networks Prisma Cloud Compute](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/prisma-prep-checklist.html?contentId=hVyPLBx_hJMaraA1hSNlnw) - [Install the Vulnerability Response Integration with Palo Alto Networks Prisma Cloud Compute](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/install-prisma-cloud-compute.html?contentId=~3JZZwT~JR9hvX47BfPWww) - [Configure the Vulnerability Response Integration with Palo Alto Networks Prisma Cloud Compute application](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/prisma-install-and-configure.html?contentId=eUaAalzijs9K2XVnBK7rBw) - [Wiz Container Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/wiz-exploring-cvr-vuln-intcf.html?contentId=0~JIPCtoNSJVrUOtkFdjQA) - [Use](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/remediate-cvr.html?contentId=mhLMSWOObawcsQzXfuTUiA) - [Container Vulnerability Response calculator rules](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-calculator-rules.html?contentId=PvFuJaFr_c7gKEFu9t2KlQ) - [Exception management in Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-exception-management.html?contentId=9XhYcPueCkCofpknG34eUg) - [Requesting and approving an exception in Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-request-approve-exception.html?contentId=7R_AUnpIRhbGCVjHALydCw) - [Request an exception for a container vulnerable item](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-raise-exception.html?contentId=5ETxVUaZyRonZ2Pf_0x4uw) - [Request an exception for a container remediation task](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/raise-exception-crt.html?contentId=gBuPI3FBDxWPn~3pjVtWLA) - [Request an exception for container vulnerabilities using GRC: Policy and Compliance Management](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/integrate-with-grc-cvr.html?contentId=hhZuW1BHsNPognwdEHrqqw) - [Define a policy reason mapping](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/define-policy-exception-reason-choices.html?contentId=hXprQ8TCZ5tnjUogex6XVw) - [Approve an exception request in Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/approve-ex-request_cvr.html?contentId=JU2MCtaJfDsgLL0ioNpbhA) - [Defer a container vulnerable item in Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/defer-vul-item-cvr.html?contentId=~fD7_iE3DZ0mcfhXwAGHMw) - [Request an extension for a deferred container vulnerable item](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/extend-defer-container-vul-item.html?contentId=h_ZLZ94HmPXVkm54sdu6hw) - [Working with an exception rule in Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/working-with-exception-rule-cvr.html?contentId=d79cB7UMy9RjqJ7HQCLDhw) - [Create an exception rule in Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/create-exception-rule-cvr.html?contentId=YNym3RyOtWuhhbRXSvMwCA) - [Approve an exception rule request in Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/approve-ex-rule-request-cvr.html?contentId=2~mWGBtrTiAvJUjWDDISMg) - [Activating an exception rule in Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/activating-ex-rule-cvr.html?contentId=IssxYr~jUz5dYtJm2OMZXA) - [Reopen an exception rule in Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/reopen-ex-rule-cvr.html?contentId=HNry6bLF7QUL9sD~QgvpYQ) - [Update an approved exception rule in Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/update-approved-ex-rule-cvr.html?contentId=H5q8KT1mkSblpV4~eOVW8w) - [Delete an exception rule in Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/delete-ex-rule-cvr.html?contentId=sBN4l6a_z3V0_r31x_FO7w) - [Request an extension for a deferred remediation task in Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/extend-defer-container-vuln-group.html?contentId=5Mh2qQCnBM_VJ9hl3nw8LQ) - [Request an extension for an exception rule in Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/extend-ex-rule-request-cvr.html?contentId=fhUY0SaO95~Wk~jNudjD3A) - [Marking and approving a false positive container vulnerability item](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/request-approve-fp-cvr.html?contentId=d832rnHTIcz784aB84Pzug) - [Mark as a false positive in Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/raise-fp-request-cvr.html?contentId=w2FwyWkxXqFS33HBeQbYNw) - [Approve a false positive](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/approve-fp-request-cvr.html?contentId=Jc_zINQT9pfgZYBZjhxCFA) - [Create, edit, and delete Container Vulnerability Response remediation task rules](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-create-remediation-task-rules.html?contentId=9xAFEgTgC7RDGclbBLnOwA) - [Create auto-close rules for Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-create-auto-close-rules.html?contentId=CXL4jIstKxJmdaD_VYqy2Q) - [Removing assignments from container vulnerable items and remediation tasks](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/unassigning-cvits.html?contentId=1BDIxWCeTUax1xGOS50Yug) - [Close a remediation task](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-close-remediation-task.html?contentId=MWnH9NtqerLB0p6wSnrK7w) - [IT Operations Management and pattern discovery](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/itom-pattern-discovery.html?contentId=MlbJDI~9TjCzCESOKSC4nw) - [Analytics and reporting](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-content-pack.html?contentId=4nCRAwj6VnLm8q7ukYdHyQ) - [Container Vulnerability Response dashboard](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-dashboard.html?contentId=6yof8ToFTEps~vZ8nId8Rg) - [Aggregated reports framework for Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/vr-common-content-pack-cvr.html?contentId=1siuZtzoq_maJvDX0I90ng) - [Reference](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-reference.html?contentId=D3C4~KLsztbghvH2vII_WA) - [Components installed with Container Vulnerability Response](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/installed-with-cvr-data.html?contentId=GiiNiEL~nD88_VzIUoq4sg) - [cvr-use-case-example](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-use-case-example.html?contentId=em0TJzQBwwwOGImGM8_LtQ) - [Container Vulnerability Response glossary](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-glossary.html?contentId=ovweJRkMXa~xm7wKsnXNDg) - [Container Vulnerable Item form fields](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/container-vul-items-fields.html?contentId=5~eoOW~TVLzKHA06FDO3BQ) - [Domain separation](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/domain-separation-container-vulnerability-response.html?contentId=eA4taCACrh3dYnHa0APwcw) - [Exception Rule form](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-exception-rule-form.html?contentId=2k5u8uSm3Vj6MWgjinXjtA) - [Prisma Cloud Compute Configuration form](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/prisma-cloud-compute-configuration-form.html?contentId=_fUTgcGyCmLRHg5MSsfaJQ) - [Request Exception form](https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-request-exception-form.html?contentId=5cp4HMUGHSBLphpngxcQeQ) - [Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/vr-config-compliance-landing.html?contentId=v_kaOEK3Xp6YDPGdahJ48A) - [Explore](https://www.servicenow.com/docs/r/security-management/configuration-compliance/vuln-config-compl.html?contentId=09scHAxnQly__GPWEUqRCQ) - [Configuration Compliance imported data](https://www.servicenow.com/docs/r/security-management/configuration-compliance/vuln-config-compl-policies.html?contentId=4c2BF1fsizAWx9Dc3HT7jg) - [Configuration Compliance discovery](https://www.servicenow.com/docs/r/security-management/configuration-compliance/vuln-config-compl-discovery.html?contentId=JafS9eCI3UqLZxcbDv7m7A) - [Configuration Compliance correlation](https://www.servicenow.com/docs/r/security-management/configuration-compliance/vuln-config-compl-correlation.html?contentId=biUNSyZXZBhf4alKXKHg3Q) - [Discovered Items for Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-cj-discovered-items.html?contentId=zd_4WfGhb9MnsU_3AgTTiQ) - [CI changes for discovered items for Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/reapply-discovered-items-ci-changes-cc.html?contentId=NedH3RFp~8CMe8rRuFahUA) - [Reconcile unmatched discovered items for Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/reapply-reconcile-unmatched-discovered-items-cc.html?contentId=eHu9RQDlAkF8o7PsDK~pPA) - [Reapply CI lookup rules on selected discovered items for Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/reapply-ci-lookup-rules-di-cc.html?contentId=fmCNjeSR8W4s_v6kW~zgXQ) - [The Tenable Vulnerability Integration with Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-tenable-integration-overview.html?contentId=TuI~lxQk5rhJRr2D4yY~7A) - [CI lookup rules](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-ci-identifier-rules.html?contentId=bZ29felyJNOZsfTlfjvw2Q) - [Deduplicating existing configuration items for Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/reapply-deduplication-cc.html?contentId=EjHvx2XsfFxukJw4SqS2NQ) - [Creating CIs for Configuration Compliance using the Identification and Reconciliation Engine](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-ci-creation-using-ire.html?contentId=1kHxSY_F7GdkqoC9lvDlxw) - [Configuration Compliance assignment rules overview](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-assignment-rules.html?contentId=Eyg6nOMsFD3trPkxbz7gXA) - [Removing assignments from Configuration Compliance remediation tasks](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-unassigninng-trg.html?contentId=rFvZzoTypHSSUd8LH4BqYQ) - [Configuration Compliance remediation tasks and remediation task rules overview](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-groups.html?contentId=LRgz_YxDxzLmVUvCbsxwbA) - [Configuring calculator groups and calculators for Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/vuln-configuring-cc-calcs.html?contentId=EXlAxygEg5d2meSj_7gJHQ) - [Exception management](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-ex-mgmt.html?contentId=yXBmEq3ecQNqSY89B5IigA) - [Configuration Compliance change management](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-chng-mngment.html?contentId=gYsMr3cikAr8mT9~BdBlrw) - [Configure](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-configuring.html?contentId=dq1G3hKpj25nR6MgqctsiQ) - [Install](https://www.servicenow.com/docs/r/security-management/configuration-compliance/install-and-configure-cc.html?contentId=6u_Ym7xIsDqnHICU3Smbtw) - [Create or edit Configuration Compliance assignment rules](https://www.servicenow.com/docs/r/security-management/configuration-compliance/create-cc-assign-rules.html?contentId=EHXJmlZg4_VjDcvhq6aLWA) - [Configuration Compliance remediation target rules](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-remed-target-rules.html?contentId=W5XBnCSbMNh1s2mtVZtW9w) - [Configuration Compliance calculator groups](https://www.servicenow.com/docs/r/security-management/configuration-compliance/vuln-config-compl-calc-groups.html?contentId=rD5I6gwWgDfedb5GlMeLXw) - [Create a Configuration Compliance calculator group](https://www.servicenow.com/docs/r/security-management/configuration-compliance/create-confi-compl-calc-group.html?contentId=7pgSLrDuzFGbpwWjnKwqjA) - [Configuration Compliance calculators and calculator rules](https://www.servicenow.com/docs/r/security-management/configuration-compliance/config-compliance-calculator-rules.html?contentId=OLLRZoV7FAufp2ec2~gZVA) - [Define fields and weights for the risk rule](https://www.servicenow.com/docs/r/security-management/configuration-compliance/define-fields-weights-risk-rule.html?contentId=uDt9HiMlYWRuRckziJvElQ) - [Edit risk rollup calculators for Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/v11create-rollup-calc.html?contentId=W9e6ljVgN9u3EmPuckewOA) - [Create, edit, and reapply risk calculators for Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/v11reapplycalc.html?contentId=4k5bKttSLtDIYBQj2HhgxQ) - [Examples for Configuration Compliance risk score calculation](https://www.servicenow.com/docs/r/security-management/configuration-compliance/config-compliance-risk-calculator-example.html?contentId=9~HX9XaSB2rvvGM8nlzLUQ) - [Create or edit Configuration Compliance remediation task rules](https://www.servicenow.com/docs/r/security-management/configuration-compliance/create-cc-group-rules.html?contentId=HgFdu5kQBB50pXgthGaUYQ) - [Specify the duration of an exception requested for a remediation task](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-ex-mgmt-sys-prop.html?contentId=Os0wQHoeaE7g7qAjUSdMJw) - [Configure Exception Management for Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/configure-exception-management-configuration-compliance.html?contentId=jMMax3~H62dOK~WQMIp5xQ) - [Add an exception approver for Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-ex-request-add-approver.html?contentId=4s5S_7Im0J_RT63PDvTdbA) - [Create a Configuration Compliance criticality map](https://www.servicenow.com/docs/r/security-management/configuration-compliance/create-criticality-map.html?contentId=erHEFHu7UX1xuzNXNNgX4w) - [Create email notifications](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-create-email-notification.html?contentId=cP_lB702~eaDikxAjBvpJQ) - [Configure approval rules for Exception Management in Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-exception-mgt-approval-rules.html?contentId=bz2t8VtlgJNvtJjhOHCXVA) - [Create configurations for an approval rule in Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-exception-mgt-approval-config.html?contentId=zYZkbvxveLjaZcUpLQ2z5g) - [Create approval levels for Exception Management in Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-exception-mgt-config-approval-rule.html?contentId=eK~2x70CXnCAyfThNYVj4g) - [Exception management workflow versus flow designer in Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-ex-mgt-flow-designer-vs-workflow.html?contentId=d7m5i03XC~A6jtnrdUZgiQ) - [Integrate](https://www.servicenow.com/docs/r/security-management/configuration-compliance/vuln-config-compl-integrations.html?contentId=blU1J3bGV3GKLx5AxDKn4A) - [Understanding the Vulnerability Response Integration with Palo Alto Prisma Cloud](https://www.servicenow.com/docs/r/security-management/configuration-compliance/prisma-cloud-overview.html?contentId=_SsTsdlT6yi5JVj4675__w) - [Preparing for installing the Vulnerability Response Integration with Palo Alto Prisma Cloud](https://www.servicenow.com/docs/r/security-management/configuration-compliance/preparing-prisma-cloud.html?contentId=HhRLo__NWLLG2ARgGnk5AQ) - [Install and configure the Vulnerability Response Integration with Palo Alto Prisma Cloud application](https://www.servicenow.com/docs/r/security-management/configuration-compliance/install-and-configure-prisma-cloud.html?contentId=YxuPG1vx06cAohYQFhGEGw) - [Configure the Vulnerability Response Integration with Palo Alto Prisma Cloud application](https://www.servicenow.com/docs/r/security-management/configuration-compliance/configure-vulnerability-response-prisma-cloud.html?contentId=Y59e9FH8iX_j2WxbAmmWCQ) - [Verify the Vulnerability Response Integration with Palo Alto Prisma Cloud import run status](https://www.servicenow.com/docs/r/security-management/configuration-compliance/verify-integration-run.html?contentId=MDqb48jHTcVyFjJBLY~IsQ) - [Data mapping](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-prisma-import-data.html?contentId=mp0Ezgw4vmqNwdYPqbjx~w) - [Prisma Cloud REST Messages](https://www.servicenow.com/docs/r/security-management/configuration-compliance/prisma-cloud-rest-messages.html?contentId=cTx85LMJ7O5bN9u2WPKUmA) - [Qualys](https://www.servicenow.com/docs/r/security-management/configuration-compliance/Qualys-cc-Integration.html?contentId=RWNVEM9qZ9JMQ7wPMM~w9A) - [Configure PCRS](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-config-qualys.html?contentId=p6m6ktqoD_sM9nr3jV0bTA) - [Components installed with the Qualys Integration for Security Operations](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-qualys-installed-with.html?contentId=SamA5FLsTJ9mCLdjsVrXuQ) - [Update configuration items with the network partition identifier for the Qualys Integration](https://www.servicenow.com/docs/r/security-management/configuration-compliance/qualys-updateci-npi-cc.html?contentId=8xKlXCuJQ~DL4OHG20nErA) - [Set Import Filters](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-qualys-add-filters.html?contentId=oP8GmXvpDSsLlVg8y_p3Hg) - [Configure Qualys Test Result Granularity](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-qualys-tr-granularity.html?contentId=DhwIARMDPm88q_GEfkP2cw) - [Resolving Qualys Vulnerability Integration issues](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-qualys-troubleshooting.html?contentId=B5MZcGq8Mt6zgET0sdJ~Ug) - [Attachments not appearing after import](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-attachments-not-appearing.html?contentId=7ESmEZ~wCw3sUI8TBd7_UA) - [Modify transform maps](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-t-ChangeTransformMaps.html?contentId=Y4LX8YKIWJCXBT9bgR0_9w) - [Check XML attachment property size](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-check-xml-prop-size.html?contentId=1IY2S2f76fiYn5td~BouCA) - [Data retrieval limitations](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-limit-data-retrieved.html?contentId=PhWNtog67GAODLoEFJ71Hg) - [Qualys Knowledge Base Integration is failing](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-qualys-kb-integration-failure.html?contentId=lsRwNxZTjjOdOFJKoWXO1g) - [Qualys integration run status chart](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-qualys-integr-run-status.html?contentId=2IFYyg4XHFKX0Tr6n1ARjg) - [REST messages](https://www.servicenow.com/docs/r/security-management/configuration-compliance/qualys-rest-messages-cc.html?contentId=rAW8W~gLkEtfBuNe_91JzA) - [Understanding the Tenable Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/configuration-compliance/tenableIntegration-d38907e33502.html?contentId=AqyzcQ~fy~ulZqodZEWyDw) - [Tenable.io integrations with the Vulnerability Response and Configuration Compliance applications](https://www.servicenow.com/docs/r/security-management/configuration-compliance/tenable-io-integrations-list-d38907e33537.html?contentId=SE3d2pUpIn4VLGYeYkQCrw) - [Tenable.sc integrations with the Vulnerability Response application](https://www.servicenow.com/docs/r/security-management/configuration-compliance/tenable-sc-integrations-list-d38907e33572.html?contentId=HqpfBetVnJxwKn5T3Z37BA) - [Tenable.cs integrations with the Vulnerability Response and Container Vulnerability Response application](https://www.servicenow.com/docs/r/security-management/configuration-compliance/tenable-cs-integrations-list-d38907e33607.html?contentId=x37t~TsALnOpzXmPdopzXg) - [Preparing for the Tenable Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/configuration-compliance/tenable-setup-checklist-d38907e33642.html?contentId=lWihMT4E~6ULOAiFHcwxow) - [Install the Vulnerability Response Integration with Tenable application using Setup Assistant](https://www.servicenow.com/docs/r/security-management/configuration-compliance/tenableInstall-d38907e33677.html?contentId=UpHnaFajoC470I5XFfy31w) - [Data retrieval settings for the Tenable Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/configuration-compliance/tenable-data-rerieve-d38907e33712.html?contentId=MkhJtURn27Umti0izM5GZQ) - [REST messages for the Tenable Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/configuration-compliance/tenable-rest-msgs-d38907e33747.html?contentId=q4g8ElTmEyO5hybFCuveng) - [Data transformation](https://www.servicenow.com/docs/r/security-management/configuration-compliance/tenable-data-transformref-d38907e33782.html?contentId=wuDDRgyZhgN~PNN0ISnR_w) - [Set import filters](https://www.servicenow.com/docs/r/security-management/configuration-compliance/tenable-add-filters-d38907e33817.html?contentId=umBZQCx_yUalI5sbewx73A) - [Tenable Vulnerability Integration reporting](https://www.servicenow.com/docs/r/security-management/configuration-compliance/tenable-integration-reporting-d38907e33852.html?contentId=d~rIVSjOshVqlD0MKlVcPQ) - [Integration run status chart for the Tenable Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/configuration-compliance/tenable-integration-run-d38907e33887.html?contentId=aM9uJSZLEr0VzskjCCQUaQ) - [Initiate rescan for the Tenable.sc integration](https://www.servicenow.com/docs/r/security-management/configuration-compliance/vr-tenable-rescan-d38907e33922.html?contentId=NKgBdXrVCoCuwlwKH6yqCg) - [Initiate rescan for the Tenable.io integration](https://www.servicenow.com/docs/r/security-management/configuration-compliance/vr-tenable-rescan-tenable-io-d38907e33958.html?contentId=05hRRBlro2ggOxwZtA2dhQ) - [Update configuration items with the network partition identifier for the Tenable Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/configuration-compliance/tenable-updateCI-NPI-d38907e33993.html?contentId=gDtA_KUu2y4ZLVFZRUpC5w) - [Import modifications for the Tenable Vulnerability Integration](https://www.servicenow.com/docs/r/security-management/configuration-compliance/tenable-optional-vul-modify-d38907e34028.html?contentId=m8C9sq9ZXbGNvF1bBkpI~g) - [Split Tenable detections](https://www.servicenow.com/docs/r/security-management/configuration-compliance/tenable-split-detections-d38907e34063.html?contentId=kGE8fD7YE1nqS01pVy46TA) - [Configure Test Result Granularity](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-tenable-tr-granularity-d38907e34102.html?contentId=3Sp_Ts5Xmf6Y3uGfvaBFGQ) - [Compliance test uniqueness key](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-tenable-compliance-test-uniqueness-key-d38907e34137.html?contentId=PDFJJVZJ6OH2sWwsIQ9O6Q) - [Configure compliance test uniqueness key](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-tenable-config-test-uniqueness-key-d38907e34174.html?contentId=mJuuFs5CdmmE393kV0vAFQ) - [Explore Wiz Test Results and Issues](https://www.servicenow.com/docs/r/security-management/configuration-compliance/exploring-wiz-ctest-results-int.html?contentId=quf2qBIc1H4_cKC0pWI45A) - [Wiz AI-SEM integration](https://www.servicenow.com/docs/r/security-management/configuration-compliance/wiz-ai-sem-integration.html?contentId=3iYxnwlTeK_yh_9xQbsmbQ) - [Configure Wiz AI SEM routing](https://www.servicenow.com/docs/r/security-management/configuration-compliance/wiz-ai-sem-configure.html?contentId=ZNfU3DyxD6bMQOpPFfgiBw) - [Wiz to AI Security data mapping](https://www.servicenow.com/docs/r/security-management/configuration-compliance/wiz-ai-sem-mapping.html?contentId=gUMlPOMKZO7Rm5qInoQkkQ) - [Use](https://www.servicenow.com/docs/r/security-management/configuration-compliance/vuln-config-compl-remediation.html?contentId=k_v09KW9QNVj78D7_7UIWw) - [Manually create a Configuration Compliance remediation task](https://www.servicenow.com/docs/r/security-management/configuration-compliance/create-test-result-group-module.html?contentId=~akqoxTI3BzDweTut_FiTQ) - [Manually create a Configuration Compliance remediation task from the Test Results list](https://www.servicenow.com/docs/r/security-management/configuration-compliance/create-test-result-group-list.html?contentId=km0LV1EjKdQLWvKFROvw3w) - [Create a change request in Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-CR-v12-create.html?contentId=jCw8TMMaOKB88IBvlHHthQ) - [Associate a remediation task to an existing change request](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-CR-v12-assoc.html?contentId=OaL7aXg_K8nm06Jj9E8_aQ) - [Split a remediation task](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-split-CRG.html?contentId=bB8jQtVNsSOJeINnYhFQ6A) - [Remove assignments from remediation tasks for you or your groups](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-unassign-trg.html?contentId=OJIQC_VfUYBD6q2iJRoTtA) - [Approve an unassign request in Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/approve-an-unassign-request-in-configuration-compliance.html?contentId=yiBjjcW~2TJUgMkGgEtVvQ) - [Automatic closing of test results](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-auto-close-common.html?contentId=yTI_96E8ZC1hTfB5CnyLtQ) - [Working with retired configuration items in Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-working-with-retired-CIs.html?contentId=VafE9z3S9LeDJSfos9D4wA) - [Automatically close test results related to retired CIs](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-auto-close-vis.html?contentId=_IG3CNV1t_Bx~C_7SO7OLA) - [Automatically closing stale test results in Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-autoclose-tr-overview.html?contentId=YSME1IzokE52VszvxIfSzQ) - [Use Auto-Close Stale Test Results in Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-autoclose-tr.html?contentId=IGo_CCChwH9JVBfKtSlPvw) - [Close a remediation task](https://www.servicenow.com/docs/r/security-management/configuration-compliance/close-test-result-group.html?contentId=bDk3pzpIW0VHKDjx7ZJ6CA) - [Requesting and approving an exception for a remediation task](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-ex-mgmt-request-approve.html?contentId=TWWqoFriZdXQDuHbKrV5TA) - [Request an exception for a remediation task in Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-ex-request-test-result-group.html?contentId=2PlJu6qsfhW2IFUAjS8stg) - [Request an extension for an exception rule in Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/extend-cc-ex-rule-request.html?contentId=9XGBUoe_MWxQrgZUk7RyPw) - [Request an exception for remediation tasks using GRC: Policy and Compliance Management](https://www.servicenow.com/docs/r/security-management/configuration-compliance/integrate-with-grc-cc.html?contentId=CptQioihC3VecobzKqbeiw) - [Approve an exception request in Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-ex-request-approve.html?contentId=wU4be2iDEIh2J7a6QgH6Cg) - [Define policy reason mappings](https://www.servicenow.com/docs/r/security-management/configuration-compliance/define-policy-reason-mappings.html?contentId=I1kPBWN9WxL1DoLvzimRWA) - [Analytics and reporting](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-pa-cc.html?contentId=7k0gE1upf7QNr4a8tuUDgQ) - [Reporting overview](https://www.servicenow.com/docs/r/security-management/configuration-compliance/vuln-config-compl-overview.html?contentId=TlXy~bF8pOFQU_GkVu6_Aw) - [Configuration Compliance dashboard](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-content-pack.html?contentId=PDOgebkGoMIrgP6M6j89EQ) - [Activate Performance Analytics for Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/configuration-compliance-install.html?contentId=7o33LwtnQgCFUzFDinC9wQ) - [Viewing the Performance Analytics for Configuration Compliance dashboard](https://www.servicenow.com/docs/r/security-management/configuration-compliance/configuration-compliance-dashboard.html?contentId=GTUrAJPTk_o6b7dAkMPS_Q) - [Aggregated reports framework for Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/vr-common-content-pack-cc.html?contentId=Ac_tDODSoySRijGPc7ffeQ) - [Reference](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-reference-info.html?contentId=Xbs~8C_SidHlsoQ0eTcrvA) - [Components installed with Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/installed-with-config-compliance.html?contentId=vTLIiEE6MNnme80XW9nkKw) - [View Configuration Compliance test groups](https://www.servicenow.com/docs/r/security-management/configuration-compliance/view-vuln-config-compl-policies.html?contentId=HEpeGflyt7CJluMYe7nfuA) - [View Configuration Compliance authoritative sources](https://www.servicenow.com/docs/r/security-management/configuration-compliance/view-vuln-config-compl-auth-sources.html?contentId=8lIZtKWdQkWky_6RIqKvJQ) - [View Configuration Compliance technologies](https://www.servicenow.com/docs/r/security-management/configuration-compliance/view-vlun-config-compl-technologies.html?contentId=ZFc6xGQmpaYBZS9H4D0JjA) - [View Configuration Compliance tests](https://www.servicenow.com/docs/r/security-management/configuration-compliance/view-vuln-config-compl-tests.html?contentId=IOqlzlzw5U4DbafjFlBfVw) - [View Configuration Compliance test results](https://www.servicenow.com/docs/r/security-management/configuration-compliance/view-vuln-config-compl-test-results.html?contentId=DLLeZ9JyofRerr6dFVOlwQ) - [View a remediation task](https://www.servicenow.com/docs/r/security-management/configuration-compliance/view-cc-tr-group.html?contentId=c0yMCzefQizLoyOFjrlH~w) - [Test result and remediation task state transitions in the Configuration Compliance application](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-state-transition.html?contentId=jrR0YPtw1mV46AdK6hNK9g) - [State synchronization](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cc-cr-state-synch.html?contentId=oHsLQ_VmmRXSqQzQot5IVA) - [Domain separation and Configuration Compliance](https://www.servicenow.com/docs/r/security-management/configuration-compliance/domain-separation-config-compliance.html?contentId=Bxcy1fW~0JsEVks5vnMhxA) - [Configuration Compliance criticality maps](https://www.servicenow.com/docs/r/security-management/configuration-compliance/vuln-config-compl-critmaps.html?contentId=mPQdjwFpv_l2Dp1tHDBQjQ) - [States, precedence, examples](https://www.servicenow.com/docs/r/security-management/configuration-compliance/vuln-config-compl-states.html?contentId=o0wTW1SSoFBhmZZocQCc_A) - [Resolving Configuration Compliance import issues](https://www.servicenow.com/docs/r/security-management/configuration-compliance/vuln-config-compl-troubleshooting.html?contentId=m0F8iVaOmbQb0Qtm5reA3g) - [Modify Qualys PC Results start date](https://www.servicenow.com/docs/r/security-management/configuration-compliance/modify-test-results-startdate.html?contentId=v~OSRznlnyVP1dGCKzLeCg) - [CI lookup rules for Microsoft Defender for Cloud Integration for Security Operations and Palo Alto Prisma Cloud](https://www.servicenow.com/docs/r/security-management/configuration-compliance/cloud-ci-look-up-for-ms-paloalto.html?contentId=f1U636rVCbUNi2dXxnmKtA) - [Vulnerability Response Workspaces](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-wkspace-overview-v16.html?contentId=LNYKqXGLQHe4PumSnlzs~g) - [Vulnerability Response workspaces overview](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vulnerability-response-workspaces-overview.html?contentId=8bIdQ_vn6ttslMK7mSRTzw) - [Patch orchestration with the Vulnerability Response Workspaces](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-patch-orch-overview.html?contentId=LwP_jlf50ikeZak3WSoF5g) - [Vulnerability Response Workspaces and updates to remediation tasks and remediation task rules](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-overview.html?contentId=omyLsSj~B953HaFB7myUJw) - [Configure the Vulnerability Response Workspaces](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-configure-ws.html?contentId=q4NzetWNu1X9Tu~UFMe8zg) - [Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vulnerability-manager-workspace-landing-page.html?contentId=xVQNVcQIPfeUs3bV3AZw4A) - [Exploring the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/exploring-vuln-mgr-workspace.html?contentId=eKGT4t8cYxphebEmNO4zaw) - [Home page in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-home-page.html?contentId=FCsqYaEBM0DSUzZKFimxNw) - [Watch Topics page in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-watch-topic.html?contentId=fVglo6PGQ8InMB20x2MEhA) - [Related items list and visualizations in a watch topic](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-ws-wtopic-related-items-v18.html?contentId=hPE8c42DyHpXd6diqfrtUg) - [Remediation efforts in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-remediation-effort.html?contentId=sdAaYQCTEMBJaP0cBQcz8w) - [Life cycles of remediation efforts, remediation tasks, and records in the Vulnerability Response Workspaces](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-ws-re-lifecycle.html?contentId=3sIoS6~3ZyVTkLRUP4f07A) - [Dashboards page in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-ws-dashboards.html?contentId=MK3pv8t5lN6vwyh10L_rsw) - [List page in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-list-page.html?contentId=h1lOTW4XJO87kG3cx433rg) - [Bulk edit in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-bulk-edit-overview.html?contentId=McGqQwBtNiEy5AvT91mwOw) - [Understanding compensating controls for risk reduction](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/compensating-controls-overview.html?contentId=hMdObvS2EUHkIzqCrPmDqQ) - [Analytics and reporting solutions for the Unified Vulnerability Response Dashboard](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-unified-dashboard-content-pack.html?contentId=x6j5CTddgeA07WhKNmULLg) - [Unified Vulnerability Response Dashboard](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-unified-dashboard.html?contentId=glT_zQGeBDfXP61cxqqZ8g) - [Monitoring and managing vulnerable items and test results in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/using-vulnerability-manager-workspace.html?contentId=WIV8MYC5EcKNDC2wxQzQXg) - [Open search results in Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-change-app-scope-search.html?contentId=AuIeUtUJYowsXOmd3uKqOg) - [Create and apply filters the summary of active records (VITs, AVITs, CVITs and CTRs)](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-home-page-create-filter.html?contentId=losgqwDL7V8xGj2OwQHSkw) - [Use watch topics in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-ws-wtopic-ui-options.html?contentId=76m~1rI5EIdByoVzktgVNA) - [Create a watch topic in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-ws-create-wt.html?contentId=EXDM7X25gKmglpqmBS_SYQ) - [Edit or delete a watch topic in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/edit-delete-watch-topic.html?contentId=XRKSL22xlphW1oRFjKUsPg) - [Deactivate or activate a watch topic](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/activate-deactivate-watch-topic.html?contentId=TfbhYMLsHdkrnkY~EoXWRQ) - [Use Remediation Effort records](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-ws-remed-eff-rcd-duplicate.html?contentId=uKxeuu0xThSUFHGvLI4lcg) - [Create a remediation effort in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-ws-create-rev16.html?contentId=upuQ80jDJKuRbTLtdvFC~g) - [Create a remediation task on-demand from Remediation Effort in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-ws-create-rt-frm-re.html?contentId=roFPd1FFX6g_Ud28VLOV_g) - [Create a recurring remediation effort in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-ws-create-recurringRE-steal-VI.html?contentId=5cL5iGp0kvzZ7qXgCd7agA) - [Transfer records to remediation efforts in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-ws-transfer-VI-to-RE.html?contentId=xWbGPrayJBB0sTkQUQMgPw) - [Add a compensating control to the library](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/create-compensatory-control.html?contentId=ycAqcbcO~s7f63fuc2nYyQ) - [Restrict or enable risk change for a CVE or TPE](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/disable-risk-reduction.html?contentId=2dPFL8dIZlqqJn_bVC7zBw) - [Rescan records and remediation tasks in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-ws-rescan-vi-VMGR.html?contentId=Xjma1SJQ3RQQawbSGKi13Q) - [Re-evaluate the remediation properties of the records in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-reevaluate-remediation-parameters.html?contentId=KldAeQdkvHiaMLvIOX9Quw) - [Direct Deferral of Vulnerable Items (VITs) by Exception Rules Without Remediation Task Creation](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/direct-deferral-of-vits-by-exception-rules-without-remediation-task-creation.html?contentId=ClYKNAxFpkWRWwTC_umbng) - [Use the List view in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-ws-vmws-list-view-duplicate.html?contentId=iCHjmhRMNj4WYzVL~pEUpA) - [Create a customized list of records](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-create-custom-list.html?contentId=ds0owyUMhPJnDzAuut4w2g) - [Create a remediation task manually in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-create-remediation-task.html?contentId=Hw0zl6G0M~9BveGsMhXWDQ) - [Enable or disable the import of test results for a Qualys test group](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/enable-disable-imports-qualys.html?contentId=6kXRByfyacFF8k~Ve_6c7Q) - [Modify the severity for a CVE or TPE](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-modify-reset-severity.html?contentId=q5ocSB46k7CwTIKx~~03pA) - [Approve or reject requests in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-ws-approve-requests.html?contentId=tJRZWdlTwVT75DtFPQVWSQ) - [Set up email notifications in the Vulnerability Response Workspaces](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-ws-email-notifications.html?contentId=Q9uWGHwTVjGJAzCqfM_DlA) - [Remediating vulnerable items and test results in the Security Exposure Management Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/remediate-vis-trg-vulnerability-manager-workspace.html?contentId=zwjwnfCcM5tEoaWJiYllEg) - [Using bulk edit in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-using-bulk-edit.html?contentId=RJ5tZT9JKp2~oLvWY9UnWQ) - [Update the state of records in bulk in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-bulk-edit-update-state.html?contentId=~bw2b83U2O09eeTmfhltUg) - [Bulk edit host vulnerable items with patches and solutions](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-bulk-edit-patches-solutions.html?contentId=F2F8mU8VTqMAlXBM8n9zmA) - [Assign records to an assignment group in bulk](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-bulk-edit-assign.html?contentId=VQidThfEBsDvUayKAeqwRw) - [Remove assignments for host vulnerable items in bulk](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-bulk-edit-unassign.html?contentId=WU_EV~gNOhja3Y8dBFd55g) - [Request bulk exception in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-bulk-edit-request-exception.html?contentId=f_zhyqVi8revZHpjvpXcXQ) - [Bulk edit for false positive in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-bulk-edit-request-false-positive.html?contentId=4RUv5Rb3bfeS_BWgHthS9g) - [Close records in bulk in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-bulk-edit-close-records.html?contentId=sxAzajvHi5rWNJOz8xsnKQ) - [Request exceptions for remediation tasks and records in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-ws-exceptions-split-VMGR-ws.html?contentId=capLXCSYp2cfIULrT1z8ig) - [Request an extension for a deferred vulnerable item in the Vulnerability Manager workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/extend-defer-vul-item-ws.html?contentId=FokTAFU~GDBAqGag4hcy9w) - [Vulnerability Manager Workspace reference information](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-reference-info.html?contentId=FkZH489jVyOB19d_wZTZLg) - [Create Watch Topic form fields](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-ws-create-wt-fields.html?contentId=egXn5jzvsMraL8O1bYuPLA) - [GRC request exception form fields](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-ws-grc-request-ex-fields.html?contentId=rtaoPwBXpTh6wPPO9dXLmg) - [Generate remediation digest form fields](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vr-ws-gen-remediation-digest-fields.html?contentId=uk8ZvwQs6BtA7O6Vk6TjiQ) - [Impact of the compensating controls on risk score and expiration date](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/requesting-approving-risk-reduction.html?contentId=dr4qRr7yV1iRVylG3OozzA) - [Examples for remediation task creation in the Vulnerability Manager Workspace and IT Remediation Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/create-remediation-task-examples.html?contentId=fVyLWjNVSVk8nff5pJjQUA) - [Re-evaluating the exceptions for selected records in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-manager-workspace/vmws-exception-rules-scenarios.html?contentId=QALuioCf3Xml4bY~6O46Hg) - [IT Remediation Workspace](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/it-remediation-workspace-landing-page.html?contentId=qrx5x0BEU4fTX~i4DKwjQg) - [Exploring the IT Remediation Workspace](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/vr-ws-itro-wkspce.html?contentId=H2NMbxLDyCqjBbwTFetJbQ) - [View a workflow example in the IT Remediation Workspace](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/vr-ws-view-ITRO-workflow.html?contentId=4IRvk8i48_NGO~y4ogJsqQ) - [Home page in the IT Remediation Workspace](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/itr-ws-home-page.html?contentId=QvSWKZj3WmiFFnUwEGbR5g) - [Dashboards page in the IT Remediation Workspace](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/itr-ws-dashboards.html?contentId=gFEDg9jDIxpZ9fBJUHhcHw) - [List page in the IT Remediation Workspace](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/itr-ws-list-page.html?contentId=~0wl0uhNho4ZkYmpMTS7pw) - [Use](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/using-it-remediation-workspace.html?contentId=q2WF2cpwufElM2YWV7JAQQ) - [Open search results in IT Remediation Workspace](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/itr-ws-change-app-scope-search.html?contentId=O_9W7Bjss~IgWo_poNY6yQ) - [Use the email digest in the Vulnerability Response Workspaces](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/vr-ws-email-digest.html?contentId=7tkUNcxxWSfR8o99y43R7g) - [Create a list in the IT Remediation Workspace](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/vr-ws-IT-list-view.html?contentId=~Su~P6~GM4emZRbDqLXFyg) - [Use records in the IT Remediation Workspace](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/vr-ws-use-vi-record.html?contentId=Y~qZxs1pYf9CGmtwbKmaQg) - [Create a remediation task manually in the IT Remediation Workspace](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/itr-ws-create-remediation-task.html?contentId=Gjee_IRdDpiB~GH5QbkKNQ) - [Use remediation task records in the IT Remediation Workspace](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/vr-ws-remed-task.html?contentId=ac5C5yaoc28gI5j4kTC5tw) - [Assign a remediation task or record to yourself in the IT Remediation Workspace](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/vr-ws-assign-to-me.html?contentId=ksHYltTkaceewkU2oTgXmQ) - [View configuration items with vulnerabilities in the IT Remediation Workspace](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/vr-ws-remed-task-v16.html?contentId=ixmEVcA8vMuTEqdivYvIFA) - [Create a change request in the IT Remediation Workspace](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/vr-ws-CRs.html?contentId=acoZRMCkEIxvxmpnnYMbzA) - [Split a remediation task in the IT Remediation Workspace](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/vr-ws-split-task.html?contentId=X4hSxh7fGPJXeUhDxufAFQ) - [Request a false positive for a vulnerable item or remediate task](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/vr-ws-mark-fp.html?contentId=bsRmHDkpEuFk68vQbTmR5g) - [Request a false positive for a set of test results](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/vmws-tr-false-positive.html?contentId=qjVMzGZFKDWlMnaPJ40HqQ) - [Request an exception in the IT Remediation Workspace](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/vr-ws-request-exception.html?contentId=_h2xyGfl91sfMd5lhPXkAA) - [Request an exception using GRC: Policy and Compliance Management in the IT Remediation Workspace](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/vr-ws-request-exception-grc.html?contentId=cb6vyTl5zxRRIjJLnRejsg) - [Request risk reduction for a vulnerable item or remediation task](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/request-risk-reduction.html?contentId=ZmzrlDmKYgevxXmDaZBo2w) - [Rescan vulnerable items and remediation tasks in the IT Remediation Workspace](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/vr-ws-rescan-vi-rt.html?contentId=rW98zOkXyHiZ26FwuWdf0w) - [Rescan Qualys vulnerable items from the Vulnerability Response workspaces](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/ws-qualys-rescan.html?contentId=e_TC9vpCwP1I_cNLL7sO9g) - [Rescan Rapid7 vulnerable items from the Vulnerability Response workspaces](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/ws-rapid7-rescan.html?contentId=K_S~_HMP79qNjAsJkvkt5A) - [Rescan Tenable.io and Tenable.sc vulnerable items from the Vulnerability Response workspaces](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/ws-tenable-rescan.html?contentId=tPbHuAqNQsJIWAX3F~jafQ) - [Reference](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/it-remediation-workspace-reference.html?contentId=yv89Twmzt2Yspk9sr3q8uw) - [Create change request form fields](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/itr-ws-create-cr-fields.html?contentId=Ed9OtUnU3QyKMdHMD7O_cg) - [Request exception form fields for policy exceptions](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/itr-ws-request-exception-form-grc.html?contentId=b1nFp~92GTsq_vRPvBWc5w) - [Request exception form for risk reduction](https://www.servicenow.com/docs/r/security-management/it-remediation-workspace/itr-ws-request-exception-form-rr.html?contentId=k5jIY7ZP9ZecVrte89X6Cg) - [Explore the Vulnerability Assessment Workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-vuln-analyst-workspace.html?contentId=uAopaJY19GGYZdbbEKRbAg) - [Exploring exposure assessment](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-exposure-assessment.html?contentId=QZmdbJIuX1pe2cJpeB4qmg) - [Exposure assessment by CVE](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-exposure-assessment-cve.html?contentId=xgJR_Qhr0y0m1P4hYl~YPA) - [Add CVEs to assess exposure](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-add-cve.html?contentId=HwLepdQl72Z1BORN_0UZ7Q) - [Create VIs for CVEs for exposure assessment](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-create-vis-for-cves.html?contentId=rvIMkjQbAY5o0Yq6apbofw) - [Activate or deactivate CVEs for exposure assessment](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-activate-deactivate-cves.html?contentId=ve4WqJexCzme5ADNVJye2g) - [Export impacted CIs for exposure assessment](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-export-cis.html?contentId=QIin7vHEBwQEBDoM8uXQBg) - [Confidence score calculation example](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-cve-sample.html?contentId=645Is8zJYSWtYczL1o6lYw) - [View vulnerable software details](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-view-vul-software.html?contentId=HXUDEDGcHwkhm4aJyZ_IYA) - [Confidence score reference tables for exposure assessment](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-confidence-score-ref.html?contentId=ORW9CXcaby2elYJk7Adb_A) - [Exposure assessment by software](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-exposure-assessment-software.html?contentId=F_4eirDBfqXPMCeKjQdlzQ) - [Add software for exposure assessment](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-add-software.html?contentId=nGUxx5vIyfdDGCW5m_Oy~w) - [Create VIs for software for exposure assessment](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-create-vis-for-software.html?contentId=Hc2WKkxyBPjCWfU~e6cClw) - [Activate or deactivate software for exposure assessment](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-activate-deactivate-software.html?contentId=irtC93ls0ID2_NuHzvdLgw) - [Export impacted CIs for software in the Vulnerability Assessment workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-export-cis-software.html?contentId=7TXf_QxA2Dsuz4eB_daWrw) - [Exposure assessment by publisher software](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-exposure-publisher.html?contentId=S72p1StdbUBRT1e60KU6Mw) - [Add software by a publisher for exposure assessment](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-add-publisher.html?contentId=EQuG_wSYT_3C3RTS~9eC_w) - [Create VIs for software by a publisher for exposure assessment](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-create-vis-for-publisher.html?contentId=X8JIy9Ey~930OnF9MMgaAw) - [Activate or deactivate software by a publisher for exposure assessment](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-activate-deactivate-publisher.html?contentId=0QnEsqB0DJLOeeok3teo2Q) - [Export impacted CIs for software by a publisher in the Vulnerability Assessment workspace](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-export-cis-publisher.html?contentId=9zJXbrsC7WGAJazce7S84Q) - [Exploring vulnerability assessment](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-vuln-assessment.html?contentId=85zWnhFWFFU_S~mWbAVRcg) - [Create a vulnerability assessment record](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/create-vuln-assessment.html?contentId=fT~ze3x6pwQixXhZXZGcrQ) - [Update the vulnerability assessment auto-flush record](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/update-the-vulnerability-assessment-auto-flush-record.html?contentId=O~WKwbjkXCfCGk~Ui~FYpw) - [Modify the vulnerability assessment record](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/modify-vuln-assessment-record.html?contentId=TcNLovBvQvl1ALNin644zw) - [Perform an assessment](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/perform-initial-assesment.html?contentId=XwFNnNGDw8epE71hVl8atw) - [Assessment tab](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-va-ws-assessment-tab.html?contentId=PkFlzp7QmDt6kbwRxzb7MQ) - [Overview tab](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-va-ws-overview-tab.html?contentId=D3uMFSEUnl6KgSUOGM5viQ) - [Assign a priority and exposure level to the vulnerability assessment record](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/assign-priority-exposure-level-vr-va-ws.html?contentId=DU~a9IcZJ6FwyTQzIw7gBA) - [Add affected CIs to the assessment record](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/add-affected-ci-vr-vuln-assess-ws.html?contentId=iPszRCftqj93Djg2lWE2hA) - [Create vulnerable items for the affected CI or affected software component](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-va-ws-create-vi.html?contentId=UzAB2c99LKs0VGzbY0ZNaw) - [Link the vulnerability assessment record to major security incident in Major Security Incident Management](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/link-vuln-assessment-msim-vr-va-ws.html?contentId=BbTaAlWIoEEo14HOOiyzxQ) - [CVE Exposure Assessment REST API](https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-va-ws-cve-exposure-assessment-api.html?contentId=d_LVXlZ2iR9pSD5aMY5guA) - [Software Bill of Materials](https://www.servicenow.com/docs/r/security-management/sbom-core/sbom-landing.html?contentId=K67K0FZcYvW9x389AJtEyA) - [Exploring Software Bill of Materials](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-exploring.html?contentId=03T77DTqwHQ_ngJFb_Fx8A) - [Exploring supported applications for Software Bill of Materials](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-supported-apps.html?contentId=1FO02kEYvR5R9bA023fT6w) - [Configuring Software Bill of Materials](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-configuring.html?contentId=mUscv17_onK3k2ECXKrlLQ) - [Install Software Bill of Materials applications](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-install-apps.html?contentId=qktUxKID~eqWGd4HY20OuA) - [Configuring the Deps.dev, OSV.dev, and PaCE integrations for Software Bill of Materials](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-config-osv-deps.html?contentId=dTqr~7gPR5Cj0EMVTO1eEQ) - [Uploading and viewing your SBOM files in the SBOM Workspace](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-using-parent.html?contentId=gQoW8cplhqkXdh5Lgbai~A) - [Uploading Software Bill of Materials files using a REST API](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-preparing-upload.html?contentId=O~GS8QkfpzzGEHtEETclrg) - [Upload Software Bill of Materials files manually](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-ingest.html?contentId=1iwvbubjvCkCpsZ6RvEZjw) - [Uploading Software Bill of Materials for DevOps SBOM files](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-uploading-devops.html?contentId=HSo3trf_SdNYvrzpv9rdwA) - [Removing older SBOM records](https://www.servicenow.com/docs/r/security-management/sbom-core/sbom-cleanup.html?contentId=UVRTHExDLmHXr4SvmJbaEA) - [Configure and run a one-time SBOM cleanup job](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-run-cleanup.html?contentId=_Qrc0FVhgyXxuijVwLIqQA) - [Classifying licenses and resolving component licenses in the Software Bill of Materials workspace](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-license-overview.html?contentId=m3wtLNqVJaDjhETNAcYw3Q) - [Classify imported licenses in the Software Bill of Materials Workspace](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-classify-license.html?contentId=k4F2FeaP0Io~FSrBUbuMCQ) - [Resolve licenses to components in the Software Bill of Materials Workspace](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-assign-license.html?contentId=TkqOtBBSO57Vw2q82Ebclg) - [Viewing reports and dashboards in the Software Bill of Materials workspace](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-viewing-data-overview.html?contentId=yPEJPOWcoXcSPqOeylE9EQ) - [Review the Home page in the Software Bill of Materials Workspace](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-home.html?contentId=AAhT6Wm88PQjKYOjcJfq7g) - [Reviewing the Components module in the Software Bill of Materials Workspace](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-components-module.html?contentId=RiJuMKBaJd8LtJQh0cVUCQ) - [Creating rules for application vulnerable items in the Software Bill of Materials Workspace](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-config-sbom-response.html?contentId=_KqgYXiI8LXiX6qQOq0rzg) - [View upload status for Software Bill of Materials files](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-bom-queue.html?contentId=Zdmq0ZIaaljxY_nT61AWUQ) - [Checking a Software Bill of Materials entity for vulnerabilities](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-check-vulnerability-use-case.html?contentId=mQpQjZ7JE5JZ9Bf4uwKLQg) - [Components installed with Software Bill of Materials applications](https://www.servicenow.com/docs/r/security-management/sbom-core/sbom-installed-with-app.html?contentId=M9ZS3vEr9_VbibFu8aOeuA) - [Create an application vulnerable item rule in the Software Bill of Materials Workspace](https://www.servicenow.com/docs/r/security-management/sbom-core/vr-sbom-create-avi-rule.html?contentId=aDoD0LMTKQ2CywrBby5yKw) - [Enterprise security case management applications](https://www.servicenow.com/docs/r/security-management/sir-apps-landing-page.html?contentId=xfM5HSAPmnhH5GL8uUDmvg) - [Security Incident Response](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-landing-page.html?contentId=L~ecEoex6uoN6Kf4jL4bhQ) - [Understanding Security Incident Response](https://www.servicenow.com/docs/r/security-management/security-incident-response/what-is-sir.html?contentId=X4YauuNF0K8t5wUPmGtptA) - [Domain separation and Security Incident Response](https://www.servicenow.com/docs/r/security-management/security-incident-response/domain-separation-security-incident-response.html?contentId=bFb9DW6RaSBPcDA5AU3gIg) - [Security Incident Response setup](https://www.servicenow.com/docs/r/security-management/security-incident-response/setup-sir.html?contentId=jhsc_homoT4ik4~k5ceeWQ) - [Install and configure Security Incident Response](https://www.servicenow.com/docs/r/security-management/security-incident-response/install-and-configure-sir.html?contentId=3PX0QSBA5aK~aqlNf~XtvQ) - [Download and install the Security Analyst Workspace](https://www.servicenow.com/docs/r/security-management/security-incident-response/install-and-configure-new-ui.html?contentId=lnUSNwBpezC5VZBT40Yd6w) - [Components installed with Security Incident Response](https://www.servicenow.com/docs/r/security-management/security-incident-response/installed-with-sir.html?contentId=G6Lq6bCPEUvwpr2yUH42eg) - [Other additional Security Incident Response setup tasks](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_ConfigureSIM.html?contentId=o5Hfs2sSn7QMtsWeh7LVXQ) - [Setup Assistant reference](https://www.servicenow.com/docs/r/security-management/security-incident-response/setup-assistant-reference.html?contentId=gUcVtdv2S~bkY2lJPYXhnA) - [Configure the Security Analyst Workspace](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-new-ui-configure.html?contentId=Bw_Uewjlofs8SCLTWn_1WA) - [Set up primary and secondary filters for Security Analyst Workspace](https://www.servicenow.com/docs/r/security-management/security-incident-response/set-up-filters-for-new-ui.html?contentId=wsQ173vnPIlgzBT~7nLSHg) - [Security Analyst Workspace properties](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-workspace-properties.html?contentId=4IzUPKuApeBr4RTcg0pR6w) - [Additional Security Analyst Workspace configuration](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-new-ui-setup.html?contentId=eqQLDFoWQyQNciFfqawFQg) - [Landing page filter configuration](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-new-ui-setup-landpage.html?contentId=pkRZWwHE5XmKstGXLt4U8g) - [Enable UI Actions](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-new-ui-setup-enable-uiaction.html?contentId=JJJuTAGjejB8JAdpQxN9TQ) - [Form UI actions](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-new-ui-setup-form-uiaction.html?contentId=3kDgMM7B_2Yr9JWS2zIGsQ) - [Related List configuration](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-new-ui-setup-uiaction.html?contentId=MIvs9dSutKE3P_0Lc3lwtw) - [Related List UI Actions](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-new-ui-setup-relatedlist-uiaction.html?contentId=tPqmPrLv8ZIUJJW2rsYTBA) - [Form configuration system properties](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-new-ui-setup-properties.html?contentId=n96KvLbATa3U8V7eabY6Rw) - [Enable playbooks for analyst selection](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-new-ui-add-playbook.html?contentId=D8jvja8PmV_it5_N_~Ki4Q) - [Troubleshooting Security Incident Response](https://www.servicenow.com/docs/r/security-management/security-incident-response/troubleshooting-sir.html?contentId=dmyfmuULVbPXHEQlA~VrAQ) - [Security Incident Response Platform Analytics Solutions](https://www.servicenow.com/docs/r/security-management/security-incident-response/security-incident-content-pack.html?contentId=DkBTkdgvs0ct2FA_TyfKqA) - [CISO dashboard](https://www.servicenow.com/docs/r/security-management/security-incident-response/ciso-dashboard.html?contentId=wEMzqPfYv2yyitdwaLdRtw) - [Security Incident Management Premium dashboard](https://www.servicenow.com/docs/r/security-management/security-incident-response/si-mgmt-premium-dashboard.html?contentId=tDkkwp6pveXu_dL_FEYmPQ) - [Security Incident Management dashboard](https://www.servicenow.com/docs/r/security-management/security-incident-response/security-incident-mgmt-dashboard.html?contentId=0~BbJzPeEZRwJ2ms7s5Khw) - [Security Incident Explorer dashboard](https://www.servicenow.com/docs/r/security-management/security-incident-response/si-explorer-dashboard.html?contentId=BiexDTj0IfTXc_70ZSj2eA) - [Security Operations Efficiency dashboard](https://www.servicenow.com/docs/r/security-management/security-incident-response/cj-sir-socpa-dashboard.html?contentId=i9hgX6uPCYArJnXbav9HAw) - [Security Incident Response Workspace](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-workspace-landing-page.html?contentId=KmHPOBuPVgZgLMol5lvgCQ) - [Explore](https://www.servicenow.com/docs/r/security-management/security-incident-response/exploring-security-incident-response-workspace.html?contentId=io7rutiNIZLVs7Od4Spusg) - [SIR Workspace plugins](https://www.servicenow.com/docs/r/security-management/security-incident-response/components-installed-with-analyst-workspace.html?contentId=FLVlIvY~GsjTOeSAB2Ytfg) - [SIR Workspace features](https://www.servicenow.com/docs/r/security-management/security-incident-response/key-features.html?contentId=qOXvTo9GhUI0U7YdfoaDeQ) - [SIR Workspace interface overview](https://www.servicenow.com/docs/r/security-management/security-incident-response/overview.html?contentId=3eL3ja_dnwyE0Oty7BNeIw) - [Upcoming section](https://www.servicenow.com/docs/r/security-management/security-incident-response/upcoming-section.html?contentId=PVOD0x9RQEzJEcawQw6Fhw) - [View upcoming tasks](https://www.servicenow.com/docs/r/security-management/security-incident-response/analyst-workspace-upcoming-events.html?contentId=HwdYaOuLFMZvaR7IhFHvpw) - [Quick links section](https://www.servicenow.com/docs/r/security-management/security-incident-response/quick-links.html?contentId=t5ftYq8DTzTm5wx7oQz_MQ) - [Working with quick links](https://www.servicenow.com/docs/r/security-management/security-incident-response/quick_links.html?contentId=N_oNwyjaeXEN0gy~HDqJpw) - [Shift Handover Records section](https://www.servicenow.com/docs/r/security-management/security-incident-response/shift-handover-records-section.html?contentId=m2NygxM5jLdq3xhELo5w5Q) - [List view in SIR Workspace](https://www.servicenow.com/docs/r/security-management/security-incident-response/setting-up-list-view-in-analyst-workspace.html?contentId=_zP6m33v~g_VwEd_odpZTA) - [Personalize a list](https://www.servicenow.com/docs/r/security-management/security-incident-response/personalize-a-list.html?contentId=CWxzUz8Uh~3GMs4jdQpN_g) - [Apply quick filters on Security Incidents and Response Tasks lists](https://www.servicenow.com/docs/r/security-management/security-incident-response/use-quick-filters-for-security-incidents.html?contentId=WwylbJ5kgNPF_jXA8oVZPw) - [Assign Security Incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/assign-security-incident.html?contentId=p_kL~1D3a_qZ7etkCnpyGA) - [Close multiple security incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/close-multiple-incidents-sir.html?contentId=qPdNHgyht4voguZsOlIBRg) - [Assign Response Tasks](https://www.servicenow.com/docs/r/security-management/security-incident-response/assign_response_tasks.html?contentId=ArWPux4tVcgrECPKfjXzjg) - [Report Phish Email](https://www.servicenow.com/docs/r/security-management/security-incident-response/report-phish-email.html?contentId=q9SbCBwThK938shplr37lw) - [Working with quick filters](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-quick-filters.html?contentId=_EX1vW3AIICWE7tTnJ~3EA) - [Add or modify quick filters](https://www.servicenow.com/docs/r/security-management/security-incident-response/add_quick_filters.html?contentId=qgX1g3~7aOOk1QSVD3VXDg) - [Export Security Incidents or Response Tasks](https://www.servicenow.com/docs/r/security-management/security-incident-response/export-security-incidents-or-response-tasks.html?contentId=I6Sk~xVN~9b0C2HcmUW3Ig) - [Manage Shift Handover records](https://www.servicenow.com/docs/r/security-management/security-incident-response/manage-shift-handover-records.html?contentId=y_9wKhj6k2ceWGUOektg9Q) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/configuring-security-incident-response-workspace.html?contentId=_k7a3tXY74QBUWvXbflUnQ) - [Configure ServiceNow Otto for Security Incident Response (SIR)](https://www.servicenow.com/docs/r/security-management/security-incident-response/configuring-now-assist-for-security-operations.html?contentId=szOqTXD6KNG5tA4DcZzX_A) - [Configure a skill](https://www.servicenow.com/docs/r/security-management/security-incident-response/activate-skills-for-now-assist-security-incident.html?contentId=hxy2ShiqjIjFS0PxBS9SCQ) - [Configure the Security incident quality assessment skill](https://www.servicenow.com/docs/r/security-management/security-incident-response/config-quality-assessment-skill.html?contentId=KcVUX_Kmc__PX_C9gbYSDA) - [Configure the Security incident resolution plan skill](https://www.servicenow.com/docs/r/security-management/security-incident-response/config-resolution-plan-skill.html?contentId=UcCzkQMP6v9CAGjkcvhxWA) - [Customize a skill](https://www.servicenow.com/docs/r/security-management/security-incident-response/cust-now-assist-security-incident-skill.html?contentId=q7oaryLNsRxlUYOC~FOULQ) - [Inputs and triggers](https://www.servicenow.com/docs/r/security-management/security-incident-response/input-triggers-now-assist-security-incident.html?contentId=CijRTZ8c7Z0VCoDZlru1aQ) - [Set up view of SIR Records](https://www.servicenow.com/docs/r/security-management/security-incident-response/set-up-view-of-sir-records.html?contentId=s7VPeOGqHTu_iUq1d4LgYQ) - [Configure SI design time investigation](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-investigation-canvas-records.html?contentId=C41tks5Z~bOp44uaf9mJOA) - [Creating View for associated info tables](https://www.servicenow.com/docs/r/security-management/security-incident-response/creating-view-for-associated-info-tables.html?contentId=8t6tpZ~cZ4tZz_hePI1b3Q) - [Adding an entry point list](https://www.servicenow.com/docs/r/security-management/security-incident-response/add-an-entry-point-list.html?contentId=cYgW4uGurfIUoEDq8fmRoA) - [Mapping View of the Associate Info to the entry point list](https://www.servicenow.com/docs/r/security-management/security-incident-response/map-view-to-the-entry-point-list.html?contentId=_EYYOwxXhTOb6vPNCmUG6Q) - [Configure each associated list](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-associated-list.html?contentId=lTPyS7QHjfgXIjZ3bLvjlw) - [SIR Workspace Related Records](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-records.html?contentId=pIqKf7MwajOi8YWyWl3AsA) - [Define the new Risk Score Calculator Rules](https://www.servicenow.com/docs/r/security-management/security-incident-response/define-risk-score-calculator-rules-sir.html?contentId=~KwZS5vK4cUH8ahjeo0mbg) - [Risk Score Calculator for Additional Related Tables](https://www.servicenow.com/docs/r/security-management/security-incident-response/risk-score-calculator-related-tables.html?contentId=JxpKUZQEdpBDQRN4oHfCLg) - [Configure Shift Handover](https://www.servicenow.com/docs/r/security-management/security-incident-response/config-shift-handover.html?contentId=FM67Qm~0D~jKyAPF9W5nJA) - [Configure Shift Handover Templates](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-shift-handover-templates.html?contentId=C3IZ~UPUcn0EHNwI4twCRw) - [Create shifts through Security Incident Response Workspace](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-shift-times.html?contentId=NOoDG7pQt4WFeI9eHrfytA) - [Security Incident Response conference call integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-conf-call-capability.html?contentId=QS40LS5s81A2ePEdZdPUZQ) - [Manage Conference Call users and groups](https://www.servicenow.com/docs/r/security-management/security-incident-response/config-conference-call.html?contentId=aPNUKuTlOE_lJjelwkF68A) - [Integrate SIR with third-party communication channels](https://www.servicenow.com/docs/r/security-management/security-incident-response/integrate-comm-channels.html?contentId=7J4iQV9X9JUxMgkWtHkUSQ) - [Configure report templates in Security Incident Response](https://www.servicenow.com/docs/r/security-management/security-incident-response/daily-status-sir.html?contentId=Dyc0dR3zw0F~4DpRHRmymw) - [Create a Report Template in Security Incident Response](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-report-template-sir.html?contentId=jgn4SSm4vBTcmCSNKGj4mg) - [System properties for reports](https://www.servicenow.com/docs/r/security-management/security-incident-response/system-properties-report-sir.html?contentId=uW6BOlWQ386C6z3wHQWm2w) - [Duplicate a report template in Security Incident Response](https://www.servicenow.com/docs/r/security-management/security-incident-response/duplicate-report-sir.html?contentId=ysBvZmPIrKIcCifWkMZzZQ) - [Edit a report template in Security Incident Response](https://www.servicenow.com/docs/r/security-management/security-incident-response/edit-template-sir.html?contentId=a54fU9iQ3BnFRYyKjSySaw) - [On-Call scheduling in Security Incident Response](https://www.servicenow.com/docs/r/security-management/security-incident-response/on-call-schedule-sir.html?contentId=k1zIiuALM5U5AYt784LYgA) - [Category management in Security Incident Response](https://www.servicenow.com/docs/r/security-management/security-incident-response/category-management-sir.html?contentId=aVhEP1UG_o92T5_4jbhFfw) - [Create a security incident category](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-category-sir.html?contentId=qv3ZuhIkSxv2w9lkFP0rIg) - [Create a security incident subcategory](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-subcategory-sir.html?contentId=RnzDu1Yz2vZJNTKD71v_dw) - [View and update Security Incident Response system properties](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-update-sirw-system-properties.html?contentId=S2kPUVVMWH4tPv6VEEbmww) - [Configure default landing tab for security analysts](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-default-landing-tab.html?contentId=EQYtTne1do3odeqVuYhZlg) - [Configure auto refresh interval for security incident lists](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-auto-refresh-for-security-incident-lists.html?contentId=D_rXVlq5_P0vj8640bvy2w) - [Configure default view for contextual menu](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-default-view-for-contextual-menu.html?contentId=LZfgza3eq02uY3Z5Kh3Htw) - [Configure the preview modal for attachment upload](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-attachment-upload-preview-modal.html?contentId=ZtjsFvOUjalmr83ULXxBnQ) - [Create quick filters for Security Incidents and Response Tasks lists](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-quick-filters-for-security-incidents.html?contentId=kyV8MSk~I8D_SQt~FDFiZg) - [Timeline in Security Incident Response Workspace](https://www.servicenow.com/docs/r/security-management/security-incident-response/timeline-sir-workspace.html?contentId=IYdzc92~AjNuh1lPfrjHDQ) - [Configure timeline event configurations](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-timeline-events-sir.html?contentId=rU90SPRr5HfX7T5RGgSm1g) - [Use](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-sir-workspace.html?contentId=UiVUUqRS0QUysFhAy9VeDA) - [Use generative AI skills](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-now-assist-for-security.html?contentId=Vu6oL10CZKG9M3RJFF6~jQ) - [Summarize a security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/summarize-security-incident-now-assist-sec-incident.html?contentId=X81Mk3BTiXCO4C4uhiyE5A) - [Generate closure notes](https://www.servicenow.com/docs/r/security-management/security-incident-response/generate-closure-notes-si-now-assist-sec-incident.html?contentId=gIfhtVZ1rvh7SmI0tH2EfA) - [Generate recommended actions](https://www.servicenow.com/docs/r/security-management/security-incident-response/generate-recommended-actions-now-assist-for-security.html?contentId=8QF4fn8zpuzisNzXya_l6w) - [Generate a post-incident analysis](https://www.servicenow.com/docs/r/security-management/security-incident-response/generate-pia-report-now-assist-security-incident.html?contentId=ja8p0WGMUacN3KYVBjzA_w) - [Explore correlation insights](https://www.servicenow.com/docs/r/security-management/security-incident-response/generating-insights-for-now-assist-for-security.html?contentId=A9S4fTpgHIdJpAmNw9TL5A) - [Generate correlation insights](https://www.servicenow.com/docs/r/security-management/security-incident-response/generate-correlation-insights-now-assist-sir-entry-points.html?contentId=QEg~KO9flZgDbnIS1FHXIg) - [Generate correlation insights in the ServiceNow Otto panel](https://www.servicenow.com/docs/r/security-management/security-incident-response/generate-correlation-insights-now-assist-for-security.html?contentId=l7PwCWNTxw1bo5MtanBtew) - [Explore Security incident quality assessment](https://www.servicenow.com/docs/r/security-management/security-incident-response/na-sir-quality-assessment.html?contentId=ZvDMuZQHcCt7PmZ_U_64cg) - [Generate a quality assessment report](https://www.servicenow.com/docs/r/security-management/security-incident-response/na-sir-generate-quality-assessment-report.html?contentId=Q2WK0spd7HhRv90ajf73IQ) - [Request generative AI skills](https://www.servicenow.com/docs/r/security-management/security-incident-response/request-genai-from-now-assist-panel-now-assist-sec-incident.html?contentId=TS9uWxxtc7ueFjmCfK3Orw) - [Use agentic workflows](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-now-assist-ai-agents-sir.html?contentId=Sz9RQRTBZLK_skAmlUN23A) - [Close security incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/now-assist-sir-close-incident-usecase.html?contentId=zNN5rYh46J5bLyWsKB0qaw) - [Close a security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/close-sir-incident-aiagent.html?contentId=ZNYF~MJvUspNF7LiA3clpw) - [Resolve security incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/now-assist-sir-resolve-incident-ai-workflow.html?contentId=7Wf7KlS~TEBTT0hwd4w~PA) - [Resolve a security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/resolve-sir-incident-aiagent.html?contentId=L3HOWxbt6pAxhuzeiFq7wQ) - [Analyze security incident data](https://www.servicenow.com/docs/r/security-management/security-incident-response/analyze-data-sir.html?contentId=_sTZ59wNuwf08kJYHP9nqg) - [Analyze security operations](https://www.servicenow.com/docs/r/security-management/security-incident-response/now-assist-sir-soc-efficiency-usecase.html?contentId=9Il9NKaVGDZVWooyclth9g) - [Analyze security operations metrics](https://www.servicenow.com/docs/r/security-management/security-incident-response/assess-metrics-sir-aiagent.html?contentId=eMu6ja4CkF6qX0NWnjcwkw) - [Generate SIR Shift Handover Report](https://www.servicenow.com/docs/r/security-management/security-incident-response/add-incidents-shifthandover-ai-agent.html?contentId=_S5BitWkO9YvD1gqGx~kkA) - [Add security incident to shift handover report](https://www.servicenow.com/docs/r/security-management/security-incident-response/add-incident-shift-handover.html?contentId=flSkosbX6YqGpqZJ__NACA) - [Working with Security Incident Records](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-analyst-workspace.html?contentId=rE~SjqAnjI0IOfkBPARWWA) - [Security Incident Overview section](https://www.servicenow.com/docs/r/security-management/security-incident-response/security-incident-overview.html?contentId=94XoZt~4xWQZw3UO6Hdelw) - [Security Incident Details section](https://www.servicenow.com/docs/r/security-management/security-incident-response/security-incident-details.html?contentId=LCgOcyZO~Ux1SWgPcoVfhQ) - [Security incident Details tab](https://www.servicenow.com/docs/r/security-management/security-incident-response/security-incident-details-form.html?contentId=BR1ZQftyEw~Or~rTNK2ibw) - [SIR Workspace Orchestration](https://www.servicenow.com/docs/r/security-management/security-incident-response/security-incident-response-workspace-orchestration-activities.html?contentId=E~Zn_nWeczLj21YH3yx3tw) - [Investigation Canvas](https://www.servicenow.com/docs/r/security-management/security-incident-response/security-incident-response-investigation-canvas.html?contentId=HFNUurdhwI0yQSwH2ivi4Q) - [Explore Investigation Canvas](https://www.servicenow.com/docs/r/security-management/security-incident-response/explore-investigation-in-sir-workspace.html?contentId=wdhEANq6xFqWVk~1ls~Yhw) - [Unified experience framework](https://www.servicenow.com/docs/r/security-management/security-incident-response/security-incident-response-workspace-capability-framework.html?contentId=PnEztfyiVZBx2q1GxKPu9g) - [Capabilities and modal screens](https://www.servicenow.com/docs/r/security-management/security-incident-response/capabilities-and-modal-screens.html?contentId=FhN8TiE9QtSgyh1Wawl4Qg) - [Examples](https://www.servicenow.com/docs/r/security-management/security-incident-response/unified-expereince-example.html?contentId=ah4yp8oYOE4E2vNvh60B~Q) - [Example 1: Run Threat Lookup](https://www.servicenow.com/docs/r/security-management/security-incident-response/example-1-select-implementations-threat-lookup.html?contentId=nBTnTq3iKQRDPFqdGAUKlQ) - [Select implementations](https://www.servicenow.com/docs/r/security-management/security-incident-response/implementation-selection.html?contentId=UzRIXVnbAP30lea0MIWvlQ) - [Example 2: Run Sighting Search](https://www.servicenow.com/docs/r/security-management/security-incident-response/common-inputs.html?contentId=S9RTraQ9pIoFM6UFuT1bew) - [Example 3: Run Additional Actions](https://www.servicenow.com/docs/r/security-management/security-incident-response/example-3-add-specific-runtime-details-inputs.html?contentId=n6Yz76o6_HXSexaEAOj5Nw) - [Security Incident Response Tasks](https://www.servicenow.com/docs/r/security-management/security-incident-response/security-incident-response-tasks.html?contentId=_pWp2HpOeUfuS_J4gSMpEA) - [Create a Response Task](https://www.servicenow.com/docs/r/security-management/security-incident-response/create_response_task.html?contentId=6e44p~A50kNzQV8SGrCZHw) - [Security Incident Response Other Records](https://www.servicenow.com/docs/r/security-management/security-incident-response/security-incident-response-other-records.html?contentId=1KlIACaYNrrAtsnNkTxjdw) - [Security Incident Response Post Incident Review](https://www.servicenow.com/docs/r/security-management/security-incident-response/security-incident-response-post-incident-review.html?contentId=yXrLiCIm1GpcsrgAN3ultw) - [Update information in security incident related records](https://www.servicenow.com/docs/r/security-management/security-incident-response/edit-related-records-in-list.html?contentId=~MvlPtr_DFQv9giGOSmZ8A) - [TISC integration within SIR Workspace](https://www.servicenow.com/docs/r/security-management/security-incident-response/tisc-sir-workspace.html?contentId=_vG51DQ1hkBraDJKjO6Jow) - [Send data from SIR Workspace to TISC](https://www.servicenow.com/docs/r/security-management/security-incident-response/send-sir-to-tisc.html?contentId=RFeQ1Ihfn_X810wx2ql1IA) - [System properties to send data](https://www.servicenow.com/docs/r/security-management/security-incident-response/tisc-integrations-system-properties.html?contentId=qsBUhwbiUmmm7A5bhaxF4Q) - [Add security incident to TISC case](https://www.servicenow.com/docs/r/security-management/security-incident-response/add-incident-to-case.html?contentId=iGeR89nb6GFfCvjYW2AuhA) - [Add observables to TISC Case](https://www.servicenow.com/docs/r/security-management/security-incident-response/observables-to-case.html?contentId=M~DcRUjebdP7Odjsy1vv8Q) - [Send Observables to TISC](https://www.servicenow.com/docs/r/security-management/security-incident-response/tisc-context-in-sir-workspace.html?contentId=sWLZdiNUIcja3JVk~GsLRA) - [Send Threat Lookup to TISC](https://www.servicenow.com/docs/r/security-management/security-incident-response/send-threat-lookup-to-tisc.html?contentId=DzzD_KtdGwWLvM7c0ROjBA) - [Send Sighting Search to TISC](https://www.servicenow.com/docs/r/security-management/security-incident-response/send-sighting-search-to-tisc.html?contentId=zWgBQn2NQo4KZIU1r7nMzg) - [Send Observable Enrichment to TISC](https://www.servicenow.com/docs/r/security-management/security-incident-response/send-observable-enrichment-to-tisc.html?contentId=7JsEQ62SEkVsnUqXx9PmuQ) - [Working with TISC Context](https://www.servicenow.com/docs/r/security-management/security-incident-response/working-with-tisc-context.html?contentId=Rxvkob7qF7mfio5YSPOxAQ) - [Add observables to TISC Case](https://www.servicenow.com/docs/r/security-management/security-incident-response/tisc-si-case.html?contentId=e8_Inl2Px9erZn7OfgpXVQ) - [Link and unlink TISC records to a security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/tisc-link-unlink-records-sir.html?contentId=w3NEITEXB12piRJCDMqGTA) - [View related info from TISC](https://www.servicenow.com/docs/r/security-management/security-incident-response/tisc-related-info-sir.html?contentId=9u7a9tFy5a9jAoddK8_AOw) - [View Enrichment Results](https://www.servicenow.com/docs/r/security-management/security-incident-response/tisccontext-enrich-results.html?contentId=FHBf3x2ZC4jAroqQtWA6wg) - [Enable security incidents for vulnerabilities](https://www.servicenow.com/docs/r/security-management/security-incident-response/tisc-view-security-context.html?contentId=gsAxVmQXlGui3C1pSUVW6g) - [Reports in Security Incident Response](https://www.servicenow.com/docs/r/security-management/security-incident-response/report-templates-sir.html?contentId=lCdpxXZEwDR~~9qr62DnHg) - [Create a report](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-report-sir.html?contentId=nt1~GsOibUo2nm6D_DElzw) - [Edit a report](https://www.servicenow.com/docs/r/security-management/security-incident-response/edit-report-sir.html?contentId=W~OXgEV_kyYXsd439hEXrw) - [Delete a report](https://www.servicenow.com/docs/r/security-management/security-incident-response/delete-report-sir.html?contentId=On9R3SGFZxxbiXnPh9_4Dg) - [Collaborate using conference call or chat in Security Incident Response](https://www.servicenow.com/docs/r/security-management/security-incident-response/collab-sir-call-chat.html?contentId=Ei3aUL3XgNiRsn3h3LZNzw) - [Start a conference call in Security Incident Response](https://www.servicenow.com/docs/r/security-management/security-incident-response/initiate-conf-call-sir.html?contentId=cS~GUbrulILafLOqkXNiZQ) - [Add participants to active Conference Call](https://www.servicenow.com/docs/r/security-management/security-incident-response/add-members-conf-call-sir.html?contentId=ewWRYYYm9DtJeAn0OocU9A) - [Start a Sidebar chat in Security Incident Response](https://www.servicenow.com/docs/r/security-management/security-incident-response/initiate-chat-sidebar-sir.html?contentId=v8ZXsPSeJsbd7DZJZ3tf_g) - [Viewing incident details with a relationship graph](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-relationship-graph.html?contentId=9Ys_hG0CCdX5QoSe~HXmUQ) - [Customize a relationship graph](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-relationship-graph-config.html?contentId=HoDasBq~UN3MeL~5KJsNHw) - [Create a relationship graph for an incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-relationship-graph-sir.html?contentId=dEc2tFHusp57MuVFvQn0gA) - [MITRE attack and defend technique graph](https://www.servicenow.com/docs/r/security-management/security-incident-response/mitre-attack-defend-graph-sir.html?contentId=vnPzff5Xe3lo0p9iip8dNw) - [View and filter the incident timeline](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-filter-incident-timeline-sir.html?contentId=~iE_X6oCapoaYG2GgU6nVA) - [Security Incident Playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/security-incident-playbook.html?contentId=tYedSGCziJtNcSwPOF1ITg) - [Prerequisites for the Playbooks](https://www.servicenow.com/docs/r/security-management/security-incident-response/getting-started-with-processes.html?contentId=xUAvqIeBjImRVXGwRnESaw) - [Rebuilding existing playbooks in Workflow Studio](https://www.servicenow.com/docs/r/security-management/security-incident-response/rebuilding-existing-playbooks-on-pad.html?contentId=h0NoEZa7EXuUhPrFBzE7TQ) - [Activity Definitions](https://www.servicenow.com/docs/r/security-management/security-incident-response/build-activities.html?contentId=XJmkPS33N54wOC1KyUDuxw) - [Example Activity Definition: Send email](https://www.servicenow.com/docs/r/security-management/security-incident-response/example-activity-definition-send-email.html?contentId=v6RDJYOOA0Y6jXp3Lk7P_Q) - [Create an Activity Action](https://www.servicenow.com/docs/r/security-management/security-incident-response/steps-to-create-an-activity-action.html?contentId=IOhkYfSL0keV7oSJg68bzQ) - [Submit to CSF X Sandbox](https://www.servicenow.com/docs/r/security-management/security-incident-response/submit-to-csf-x-sandbox.html?contentId=OT0o_8uZILVvuNE6OhRGQQ) - [Sample Playbooks for SIR Workspace](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-workspace-playbooks.html?contentId=EmNj8Kmj_hLrfB3c8VClQw) - [Working with MSI Records](https://www.servicenow.com/docs/r/security-management/security-incident-response/working-with-msi-records.html?contentId=AKeMJZ6uHeozgNrcB4HDlQ) - [Propose as Major Security Incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/propose-to-major-security-incident.html?contentId=1mLTK0u0oZXbsyD4bDPI_Q) - [Promote to Major Security Incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/promote-to-major-security-incident.html?contentId=jqeUkHq~1GMm2_yqTdrafA) - [Link to Major Security Incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/link-to-major-security-incident.html?contentId=mlQJaoWTqbFg99UOR46hqw) - [Working with Form UI actions](https://www.servicenow.com/docs/r/security-management/security-incident-response/enable_workspace_form_ui_actions.html?contentId=NZT~cI~WTgDHlIVxRLEXog) - [Security Incident Closure workflow](https://www.servicenow.com/docs/r/security-management/security-incident-response/security-incident-closure-workflow_0.html?contentId=X9ej_VP6WjzLt2AFJBjP_Q) - [Handle security incidents using AWA](https://www.servicenow.com/docs/r/security-management/security-incident-response/handle-incidents-using-awa.html?contentId=m8kPI87gWUu7zeMJS8ki0Q) - [View SIR Workspace Dashboards](https://www.servicenow.com/docs/r/security-management/security-incident-response/working-with-analysts-dashboard.html?contentId=qJ9S1A3kGNiRjQQbwIL9wQ) - [Security Incident AI ROI Summary dashboard overview](https://www.servicenow.com/docs/r/security-management/security-incident-response/ai-roi-summary-dashboard-overview.html?contentId=GujtSHHZv99YTGId_L0pbQ) - [Review Security Incident AI ROI Summary dashboard](https://www.servicenow.com/docs/r/security-management/security-incident-response/ai-roi-summary-dashboard.html?contentId=YNcLDASb~rqPQI3fZwhuaw) - [View Security Analyst Overview dashboard](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-security-analyst-overview-dashboard.html?contentId=keiCk_~aOqlBmH2Q04dPBg) - [View Security Incident Explorer dashboard](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-security-incident-explorer-dashboard.html?contentId=OA81WsR3bWYtM3pKHXewLw) - [View Security Incident Management dashboard](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-security-incident-management-dashboard.html?contentId=kTj1ZI7DPcNVMX9rGiwvyQ) - [View Security Operations Efficiency dashboard](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-security-operations-efficiency-dashboard.html?contentId=4b4wHKgJdrLG_TEmGZIEKQ) - [View Security Incident Response Premium KPIs dashboard](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-sir-premium-kpis-dashboard.html?contentId=c9TOcUocXgOpElUoZsjuWg) - [View Context Sensitive Analytics - SI dashboard](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-context-sensitive-analytics-si-dashboard.html?contentId=dDn3DEo9s5U7YqYymypCUQ) - [View CISO dashboard](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-ciso-dashboard-overview.html?contentId=8k0DkDozFg~RvUq54s4CTQ) - [View CISO Reporting Overview dashboard](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-ciso-reporting-overview-dashboard.html?contentId=VMk~2JMC_lIPXyc7wvNoAg) - [View Security Incident Manager Overview dashboard](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-security-incident-manager-dashboard.html?contentId=FHEy37kkRJyJrC7MLIIRKQ) - [View Security Incident Response Health dashboard](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-sir-health-dashboard.html?contentId=sJ8aepcEgqg~7vuzVdSCsw) - [Security incident creation](https://www.servicenow.com/docs/r/security-management/security-incident-response/si-creation.html?contentId=yG1TDkDqI171uu5SZvkmjg) - [Security incident manual creation](https://www.servicenow.com/docs/r/security-management/security-incident-response/si-manual-creation.html?contentId=dSosCsX1YJRBJruvG045pA) - [Create from Security Incident list](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_ManuallyCreateSecurityIncident.html?contentId=pacjjG4LE~X9dbgABTSr0w) - [Create from Security Incident Catalog](https://www.servicenow.com/docs/r/security-management/security-incident-response/manual-si-creation-catalog.html?contentId=HTKXI5V9byryHxNCL6AxDg) - [Create from Event Management alert](https://www.servicenow.com/docs/r/security-management/security-incident-response/manually-create-si-from-em-alert.html?contentId=wI1Oz2OJFYmLT1IhGE9Q4w) - [Security incident automatic creation](https://www.servicenow.com/docs/r/security-management/security-incident-response/c_3rdPartyAlertMonToolInteg.html?contentId=3~rP3YuXqRixcSLq4aLlIw) - [Security incidents created from events and alerts](https://www.servicenow.com/docs/r/security-management/security-incident-response/c_ScIncdUseAlrts.html?contentId=ODPYJk6VOwx1Hh9BNfXQiw) - [Data imported into security alerts](https://www.servicenow.com/docs/r/security-management/security-incident-response/c_DataImportedIntoSecAlerts.html?contentId=CYpBSmGk6o_o_LeKJ0ql9w) - [Create security incidents from User Reported Phishing emails](https://www.servicenow.com/docs/r/security-management/security-incident-response/urp-about.html?contentId=R86qAKBKymaWfHaYVUxq8w) - [Record creation from security incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/file-creation-from-si.html?contentId=u2scLOFS_X1VSHeOtpYxtA) - [Create a change, incident, OT change request, or problem](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_CrtChgOrPrbFromSI.html?contentId=NIH2Ww~cE9U2uUGKGTXDuw) - [Create a Customer Service case](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-cs-case-from-si.html?contentId=jS74gwCsi6_MRwcYdPSVAA) - [Add a security incident to a security case](https://www.servicenow.com/docs/r/security-management/security-incident-response/add-sec-inc-to-case.html?contentId=WX~gvEXjU9b2pnEeyWsiHA) - [Create response tasks](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_CreateResponseTask.html?contentId=JKeCLDb4BvDCi7XPaSFKHw) - [Manage Predictive Intelligence for User Reported Phishing](https://www.servicenow.com/docs/r/security-management/security-incident-response/cj-sir-ml-predictive-intelligence-urp.html?contentId=2JBDhqGrQU2L4eSbu3CAbw) - [Predictive Intelligence for User Reported Phishing](https://www.servicenow.com/docs/r/security-management/security-incident-response/cj-sir-ml-urp.html?contentId=z7FSFLi26i9PcbkGVIWVFg) - [Required components and plugins](https://www.servicenow.com/docs/r/security-management/security-incident-response/cj-sir-ml-urp-comp.html?contentId=PGA2x~uVLt8NBAqgV9VNrg) - [Final verdict generation for User Reported Phishing](https://www.servicenow.com/docs/r/security-management/security-incident-response/cj-sir-ml-urp-final.html?contentId=G1i1063g4nLGcB40cOdxow) - [Troubleshooting](https://www.servicenow.com/docs/r/security-management/security-incident-response/cj-sir-ml-urp-trouble.html?contentId=KScu0zU~MJazSbhg0ZbVrQ) - [Configure Predictive Intelligence for User Reported Phishing](https://www.servicenow.com/docs/r/security-management/security-incident-response/cj-sir-ml-urp-configure.html?contentId=97rybu2lMVKAm9kuoZIPyA) - [Assigning security analysts](https://www.servicenow.com/docs/r/security-management/security-incident-response/r_AgentAssignment.html?contentId=Z89Zhc3Ed77CFUPjAeNNpg) - [Process Mining Workspace for Security Incident Response](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-process-mining.html?contentId=mrEmqNjgkrAMeZHUszmW9g) - [Create process mining project for security incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-proj-proc-min-sir.html?contentId=CLHQVr1oonO8R_3o3VpJ5A) - [Process Mining use cases for security incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/proc-min-use-cases-sir.html?contentId=hca3o_PazyJJ5PdICfq4pA) - [Managing security incidents and inbound requests](https://www.servicenow.com/docs/r/security-management/security-incident-response/manage-si-details.html?contentId=ui7wmOlr3b3Y~6KK8AbhSQ) - [Create an inbound request](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_CreateSecurityIncidentRequest.html?contentId=kVg5Oon_DuqbL9kqjSqD1g) - [Manage observables](https://www.servicenow.com/docs/r/security-management/security-incident-response/sec-inc-observables.html?contentId=~Y8EgYLfyS5z6AjPE62~yw) - [Show IoC information for a security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/show-ioc-info-for-si.html?contentId=Zm~JYl6ySnuIHz_vJD1hlQ) - [Create a security incident observable](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-si-observable.html?contentId=QLrZXUpLecJSQcwLP0w3VA) - [Manage file observables](https://www.servicenow.com/docs/r/security-management/security-incident-response/manage-file-observables.html?contentId=7zfkVasPLl4aodSRkuXx3g) - [Edit a security incident observable list](https://www.servicenow.com/docs/r/security-management/security-incident-response/edit-si-observable.html?contentId=yQsgaAo3c2tcDtflgVAfKg) - [Add multiple security incident observables](https://www.servicenow.com/docs/r/security-management/security-incident-response/add-multiple-si-observables.html?contentId=hKRIXel6wj7cLesEfWuagQ) - [Automatic security incident observable log data enrichment](https://www.servicenow.com/docs/r/security-management/security-incident-response/si-observ-data-enrich.html?contentId=fgLYgUMrpD8UVGh_JIoBVw) - [Publish observables to a third-party watchlist](https://www.servicenow.com/docs/r/security-management/security-incident-response/run-publish-watchlist.html?contentId=QmZgGabcpA_Z6U89Eg~K7g) - [Manage lookups and scans](https://www.servicenow.com/docs/r/security-management/security-incident-response/c_Scans.html?contentId=EdCW6AcPVa8B2rlh~QxQiA) - [Submit an IoC Lookup request from a security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_SubmitThrtReqFromSecInc.html?contentId=oSb1UkdQgvOvO7iOZNHjSA) - [Submit an IoC Lookup request from the Security Incident Catalog](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_SubmitThrtScnReqFromCat.html?contentId=hybCk8UroIlfxNPQxr93uw) - [Submit scan request from security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_SubmitVScanReqFromSecInc.html?contentId=YKI0_AyqSACPkOw~j7hjgQ) - [Submit scan request from SIR catalog](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_SubmitVScanFromSecCat.html?contentId=N7lu6X92I_fJENBTh7BLWg) - [Define new on-demand orchestrations](https://www.servicenow.com/docs/r/security-management/security-incident-response/define-new-on-demand-orchs.html?contentId=pU8uEbmbjotA7PaQM4l8dQ) - [Register new Security Operations applications](https://www.servicenow.com/docs/r/security-management/security-incident-response/register-new-secops-apps.html?contentId=10EajMYvOVf8URLjTe9uGw) - [Add information to a security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/add_inc_details_to_si.html?contentId=UjtVIJjBgmfW6YTSvRb45g) - [Add problems, changes, and incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/add-rel-recs-to-si.html?contentId=N0rwFP4yphJTKmoo~4YAHA) - [Invoke a process dump for an enriched process in Windows](https://www.servicenow.com/docs/r/security-management/security-incident-response/procdump-windows.html?contentId=ehV0bDkSIKM69AfNMY8jyA) - [View information in a security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/perform-addtl-tasks-on-si.html?contentId=MVpBbhOc8KEdOTJdUlVt4Q) - [Parent and child security incident relationships](https://www.servicenow.com/docs/r/security-management/security-incident-response/c_ParentChildRelationships.html?contentId=qn3vFl505FHEsHm3aYF_Ag) - [View affected items for a security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/show-affected-items-for-si.html?contentId=ODhGKpLuW2n4_2pSG5uc_Q) - [Add unmatched affected user for security incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-unmatched-affected-user-for-si.html?contentId=PHxudFU8cM5Pq9xhQQjzTw) - [View related items for a security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/show-related-items-for-si.html?contentId=AQYhD0tjaqHABX9yT3CEHA) - [View enrichment data for a security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/show-enrich-data-for-si.html?contentId=H~~Gsk6e_mM2M5LwKtHPPw) - [View response task information for a security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/show-response-tasks-for-si.html?contentId=YDIrYcYNA4B2x13oVkn95g) - [View related events and alerts in security incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_ViewRelatedAlerts.html?contentId=xXPtzrFmtdPJzC8IOWcUQg) - [View security incident to customer service case mapping](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-cs-field-mapping.html?contentId=FSFNk9sJGoqx2N2cb3n4cQ) - [View a Security Incident Response runbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-runbook.html?contentId=UsQJm0jqzHfTfFTQiWQRQg) - [Identify affected configuration items](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_ViewBSMMap.html?contentId=ZhlrFRdrBBbScIPq1Phktw) - [Calculate the severity of a security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/calculate-si-severity.html?contentId=5Vj6KHR4rT3gZzcio2~dYg) - [Search for and delete phishing emails](https://www.servicenow.com/docs/r/security-management/security-incident-response/search-delete-exchange-emails.html?contentId=67BMZIJXwLNoWbRM6hZnBQ) - [Create a security incident knowledge article](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_CrtScrIncdtKnwArt.html?contentId=qSP1PqJsk~BV2_KOtLjrHg) - [Escalate a security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/escalate-security-incident.html?contentId=T1VGTNpifkThpJE7HqyRdg) - [Manage post incident activities](https://www.servicenow.com/docs/r/security-management/security-incident-response/c_PostIncidentReview.html?contentId=JUYQL9fhaqm0eH6_HclxxA) - [Assign post incident review roles](https://www.servicenow.com/docs/r/security-management/security-incident-response/assign-pir-roles.html?contentId=sRX44Mg9cLlNhSls3FSJQA) - [Post incident review report](https://www.servicenow.com/docs/r/security-management/security-incident-response/new-post-incident-review-report.html?contentId=5mjnaP33LqOGc8eROpuTDQ) - [Manage Post Incident Review Report](https://www.servicenow.com/docs/r/security-management/security-incident-response/new-manage-post-incident-review-report.html?contentId=i9ClczVigCkUU3eIn_8zCw) - [Configure an assessment trigger condition](https://www.servicenow.com/docs/r/security-management/security-incident-response/post-incident-review-setup.html?contentId=3_5YxC_XJxk3e29VR6duuA) - [Assessment trigger conditions examples](https://www.servicenow.com/docs/r/security-management/security-incident-response/assessment-trigger-conditions-usecase.html?contentId=o0OenNfOa70E9En6Y0kJ9w) - [Perform a questionnaire-based post incident review](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_PerformPostIncidentReview.html?contentId=TeNhvpK7xV9rUuyZG591ow) - [Create post incident review questionnaire categories](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_CreatePIRSurveyCategories.html?contentId=xbx4HsNw4cMwC9kQZQjzfw) - [Compose post incident review questions](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_CmpsPstIncdRvwQtns.html?contentId=LOqr~WYAK94b2ksODpMj_Q) - [Create post incident review assignment rules](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-pir-assignment-rules.html?contentId=BQR8Oudt2dNdJz_pTT9tNw) - [Close security incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_ClosingSecIncidents.html?contentId=jjJSdTE_SX5kFZxJJA9SXw) - [Add closure information to a security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/add-closure-info-to-si.html?contentId=n3A0SMUTqYIoaRzdZ~EgDQ) - [Restrict access to security incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/restrict-access-security-incidents.html?contentId=IPfnCJP4AI1dogBTd7D1pg) - [Manage security threats using the Security Analyst Workspace](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-new-ui.html?contentId=sV0jGtiG_8kiR96GPU4zUA) - [Resolve security threats with the playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/use-the-playbook.html?contentId=dW0d_OK5_VxyGhnx8sM_Lg) - [Sightings searches on phishing and malware attacks](https://www.servicenow.com/docs/r/security-management/security-incident-response/sighting-searches-on-phishing-attacks.html?contentId=AVfo0aAYV8uOplF7aPfsTw) - [Playbook Resources](https://www.servicenow.com/docs/r/security-management/security-incident-response/cj-sir-flow-library.html?contentId=Zwn18qzHCaaZdkSNSH6FUA) - [Activate a Security Incident Response flow](https://www.servicenow.com/docs/r/security-management/security-incident-response/getting-started-phishing-playbook.html?contentId=ffOeLUXDEIXexcGV5I2FXA) - [Security Incident Response playbooks](https://www.servicenow.com/docs/r/security-management/security-incident-response/cj-sir-about-flows.html?contentId=NEWz9Psdlx2VBpfQrr7HyQ) - [Process-based Playbooks](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbooks-process-based.html?contentId=GYPl6VzMa_XLZ2GDYJNpxg) - [Playbook for Manual Phishing](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-manual-phishing.html?contentId=NgwBgREH3wkiNY2oZRe_SQ) - [Create playbooks for Manual Phishing in Workflow Studio](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-process-manual-phishing.html?contentId=NLAIhRMXOkUOvRFR1hUyyA) - [Add parallel activities](https://www.servicenow.com/docs/r/security-management/security-incident-response/parallel-activities.html?contentId=jvdb_83PZ2HAeeXPhiiSJw) - [Using the Manual Phishing playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-manual-phishing-playbook.html?contentId=IckCYzFRHXJLAz2XeovAoQ) - [Workspace Playbook summary](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-workspace-playbook-summary.html?contentId=TYXceZIUILnO16jt8V0Pbg) - [Playbook for Automated Phishing](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-automated-phishing.html?contentId=Uc9V6xXbW92bZFkqrACfhg) - [Create processes for Automated Phishing in PAD](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-process-automated-phishing.html?contentId=NVFpHZjb4pREUEmiwUvrZg) - [Using the Automated Phishing playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-automated-phishing-playbook.html?contentId=AdJm2OIqNiBNZ4GfS8otHg) - [Playbook for Manual Malware](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-malware-manual.html?contentId=8W5R~T0lB46kYgPNVWlvTw) - [Create processes for Manual Malware in PAD](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-process-manual-malware.html?contentId=KwE8tX5Hamopo57YWsVHTQ) - [Using the Manual Malware playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-manual-malware-playbook.html?contentId=UB90ulfrauOCSEHeqsMXCQ) - [Playbook for Automated Malware](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-automated-malware.html?contentId=iTcQRjJ7TwvBSYpAJ_bEPA) - [Create processes Automated Malware in PAD](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-process-automated-malware.html?contentId=juK5ulwNoZtU2~HuXUx2mQ) - [Using the Automated Malware playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-automated-malware-playbook.html?contentId=w1Hvx_qpHLf3MHaQIa3WhQ) - [Playbook for Failed Login Manual](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-failed-login.html?contentId=52x8~Jf_hi0By7oW~VmrQA) - [Create processes for Failed Login Manual in PAD](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-process-failed-login-manual.html?contentId=Uj5Lj05QDQbh0LPS5pbgxQ) - [Using the Failed Login Manual playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-failed-login-manual-playbook.html?contentId=p_uL_gwsDajTZvw4v9lDdg) - [Flow-based Playbooks](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-flow-based.html?contentId=sDCRvQnknbruZ9TD5MiTRg) - [Playbook for Automated Phishing](https://www.servicenow.com/docs/r/security-management/security-incident-response/flow-designer-and-phishing-response.html?contentId=MLduOtlw4YPdpc0EfOCPgw) - [Run the automated phishing response playbook flow](https://www.servicenow.com/docs/r/security-management/security-incident-response/run-phishing-playbook.html?contentId=5GeNJajSCdtnkSYaf_o3ZA) - [View flow action designer](https://www.servicenow.com/docs/r/security-management/security-incident-response/action-phishing-playbook.html?contentId=wQJFzSZ_zRD4v50rMbmPHQ) - [View subflow designer](https://www.servicenow.com/docs/r/security-management/security-incident-response/subflow-phishing-playbook.html?contentId=~MDw_IL0Hl~XqNcc4OFcPw) - [Playbook for Automated Malware](https://www.servicenow.com/docs/r/security-management/security-incident-response/cj-sir-about-malware-flow.html?contentId=1PCrf9MlL_tK7wKgGhlzqw) - [Run the automated malware playbook flow](https://www.servicenow.com/docs/r/security-management/security-incident-response/run-malware-playbook.html?contentId=lFSRxe37PXhk8TQTz1~ozQ) - [Playbook for Failed Login Manual](https://www.servicenow.com/docs/r/security-management/security-incident-response/cj-sir-flow-library2.html?contentId=brykMWH~GQSmTbu6ogSrzA) - [Playbook for Child Security Incident Automation](https://www.servicenow.com/docs/r/security-management/security-incident-response/cj-sir-flow-library4.html?contentId=MiFdsFd8ClVyYe8fMAdP4A) - [Playbook for Office 365 - Malicious File Detected](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-office-malicious-file-detected-.html?contentId=6~ICgw~npNe1BJJlXBKzsw) - [Set up the Office Malicous File Detected playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-setup-office-malicous-file-detected.html?contentId=Tx~a4kiSXSx8UGdEOGtnAw) - [Use the Office 365 Malicious File Detected playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-using-office-malicous-file-detected.html?contentId=JblPsKHhx5SeWF6PT83BsQ) - [Playbook for Repeat Detection](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-repeat-detection.html?contentId=2l2BbQTxs48B90c2vUmk_w) - [Set up the Repeat Detection playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-setup-repeat-detection.html?contentId=SsdfZ1M7N~2babUxN6tOtw) - [Use the Repeat Detection playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-using-repeat-detection-playbook.html?contentId=1xRtBTgyPlyU7MVLPALkrQ) - [Playbook for Spoofed Emails (using the same Display name)](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-spoofed-emails-display-name.html?contentId=wSYa~aCegAQEd276hxDhww) - [Set up the playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-setup-spoofed-emails.html?contentId=TcoHkxzPGHeTiNIgiDC3ZA) - [Use the playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-using-spoofed-emails.html?contentId=iMgn7djQmqrONQHo1zyVTw) - [Playbook for Endpoint Detection](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-endpoint-detection.html?contentId=hH5cXMwM3eVeK3Lkd~qKZw) - [Set up the Endpoint Detection playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-setup-endpoint-detection.html?contentId=Ch4Dt8Y9qMQAMrKBGpa5vg) - [Use the Endpoint Detection playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-using-endpoint-detection.html?contentId=MB1yDzxQjTklY5fMsd2aKA) - [Playbook for Possible Password Spray](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-possible-password-spray.html?contentId=KHJRn9DtEOeuB9NFkn5OUQ) - [Set up the Possible Password Spray playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-setup-possible-password-spray.html?contentId=hBCIFPkpSmwp~iYgvirnbg) - [Use the Possible Password Spray playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-using-possible-password-spray.html?contentId=d_maCxc3ahy9LPOiwNc3zg) - [Playbook for T1003 - Detect Credential Dumping Tools](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-detect-credential-dumping-tools.html?contentId=uipfI4R0OOtIJoLss4tfoQ) - [Set up the T1003 - Detect Credential Dumping Tools playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-setup-detect-credential-dumping.html?contentId=waIPWZbhryMkr2DRxF3tLw) - [Use the T1003 - Detect Credential Dumping Tools playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-using-detect-credential-dumping.html?contentId=ZkeCa86WOZxEIDrHJqrINg) - [Playbook for Email Domain Spoofing Detection](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-email-spoof-detection.html?contentId=ZpB011YD9_zccs3OyjTFmA) - [Set up the Email Spoof Detection playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-setup-email-spoof-detection.html?contentId=gjYKwY7dFOrrUOoUnKBeSA) - [Use the Email Domain Spoofing Detection playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-using-email-spoof-detection.html?contentId=y4xXhfPefdurjWzGbaJl8w) - [Playbook for Typo Squatted Domain](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-typo-squatted-domain.html?contentId=dHbkzAAEvGAUP6kznTPeVA) - [Set up the Typo Squatted Domain playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-setup-typo-squatted-domain.html?contentId=ENYtt60EI0_Q~RzlbvsDoQ) - [Use the Typo Squatted Domain playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-using-typo-squatted-domain.html?contentId=FnF2oS~R3uZIjx5ssuybUA) - [Playbook for Credential Sniffing](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-credential-sniffing.html?contentId=bcfR7S4ZQ2pz~EhkD3~UaQ) - [Set up the Credential Sniffing playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-setup-credential-sniffing.html?contentId=o8yMS02gbfZ37bi2PVMKgg) - [Use the Credential Sniffing playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-using-credential-sniffing.html?contentId=rUumfFtlKnCR1fN0V0xCmg) - [Playbook for T1070 - Windows Events Logs Cleared](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-windows-events-log.html?contentId=NicGKnL8YVa2AimHVmcvdw) - [Set up the T1070 - Windows Events Logs Cleared playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-setup-windows-events-logs.html?contentId=EBisMDqOzat93zEPw9C1kA) - [Use the T1070 - Windows Events Logs Cleared playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-using-windows-events-logs.html?contentId=fhQedmxXCKgbvB4DFRhtWg) - [Playbook for OSquery of External Address in /etc/hosts file](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-osquery-external-address.html?contentId=Vz0usmJGnhpH5dYhqYdSuw) - [Set up the playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-setup-osquery-external-address.html?contentId=Ir6WCe9V~O3Z_f0eKLR7BQ) - [Use the playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-using-osquery-external-address.html?contentId=u~AdIJ5mCqFaQNiwpPEldQ) - [Playbook for User Deleting Bash History - Cloud](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-deleting-bash-history.html?contentId=hzUCZl8NNVGrUKPi0NsUZw) - [Set up the User Deleting Bash History playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-setup-deleting-bash-history.html?contentId=DGrEna2DNS~o3aBLudtzFA) - [Use the User Deleting Bash History playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-using-deleting-bash-history.html?contentId=bmjyM4fu~IDn6K_r8hnOMQ) - [Playbook for successful VPN attempts from service accounts](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-successful-vpn-attempts.html?contentId=FKyAfI_uL8UbBZSmzdLY8Q) - [Set up the playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-setup-successful-vpn-attempts.html?contentId=0ixiwx3h~cgxz9nzDOHkvQ) - [Use the playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-using-successful-vpn-attempts.html?contentId=Znj9lYhmvdpnRhvlVUVX8Q) - [Playbook for Attempted Access to Deactivated Accounts](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-attempted-access-deactivated-accounts.html?contentId=BIQfl26fTrqIlygk~jcbrA) - [Set up the Attempted Access Deactivated Account playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-setup-attempted-access-deactivated-accounts.html?contentId=rumd8q4Ozy_06q_N~N5RIQ) - [Use the Attempted Access to Deactivated Accounts playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-using-attempted-access-deactivated-accounts.html?contentId=0fArkwQYqr~olgZ5kyE1VA) - [Playbook for T1003 - Defense Evasion - Mimikatz DCShadow](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-defense-evasion-mimikatz-dcshadow.html?contentId=a79T8ZENsEbMNqDyc6VftQ) - [Set up the playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-setup-defense-evasion-mimikatz-dcshadow.html?contentId=RVUB7hfnLhn1TuQyccYPfg) - [Use the playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-using-defense-evasion-mimikatz-dcshadow.html?contentId=1DLUcOv2TCPEw9kRirZDGg) - [Playbook for T1003 - Credential Dumping - Mimikatz DCSync](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-credential-dumping-mimikatz-dcsync.html?contentId=jgPlC~6RWw3LIIETYAstrA) - [Set up the playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-setup-credential-dumping-mimikatz-dcsync.html?contentId=Ccdda2MVaLV4e5pGJjsRgQ) - [Use the playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-using-credential-dumping-mimikatz-dcsync.html?contentId=TUlQhayF1zZCm2xkD~kn3Q) - [Playbook for Okta User Login Failures from Multiple IPs](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-okta-user-login-failures-ips.html?contentId=HF2inyvfgIOrjbnNrxvdHw) - [Set up the playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-setup-okta-user-login-failures-multiple.html?contentId=toba7rGchDZxheDOTcjbgQ) - [Use the playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-using-okta-user-login-failures-multiple.html?contentId=sU3R~xujapuaXcncoSEXXw) - [Playbook for ModSec Brute force by IP Burst](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-modsec-bruteforce-ip.html?contentId=e_35fzy~WGwuyA1XE63RJg) - [Set up the ModSec Brute force by IP Burst playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-setup-modsec-bruteforce.html?contentId=wCikW71u3rIJrreuMu4GCA) - [Use the ModSec Brute force by IP Burst playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-modsec-bruteforce-ip-playbook.html?contentId=92FKwzEsUUsY6d~qCEHbZA) - [Security Incident Response playbook actions](https://www.servicenow.com/docs/r/security-management/security-incident-response/cj-sir-flow-library-1.html?contentId=1q_b9i2CFkLgVXzyIWRc3g) - [Visual representation of Security Incident Response reporting](https://www.servicenow.com/docs/r/security-management/security-incident-response/c_SIRHomepage.html?contentId=e6r3ppHEQg4Jn7aVSCCLug) - [Security Incident Response Overview dashboard](https://www.servicenow.com/docs/r/security-management/security-incident-response/c_SIROverview.html?contentId=L4QiQlLRW1YU7MSbyRCVOw) - [Access Security Incident Response Explorer](https://www.servicenow.com/docs/r/security-management/security-incident-response/access-sec-in-resp-explorer.html?contentId=TWdWyBC5VHDIeZCjc6Sacw) - [Security incident map](https://www.servicenow.com/docs/r/security-management/security-incident-response/c_SecurityIncidentGeoHeatmap.html?contentId=E~yW2FduuyJ4eZmM_gC2bQ) - [Add map to Security Incident Response overview](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_AddGeoHeatmapToSIROverview.html?contentId=pFyXAPQ~2lN0FKNCLjbJ0g) - [Modify security incident map](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_ModifySecIncGeoHeatmap.html?contentId=aV4C_Vee64nnvKhVXpeoGg) - [Security incident treemaps](https://www.servicenow.com/docs/r/security-management/security-incident-response/c_ConfigureTreemaps.html?contentId=fTT1rRuGt~FNpBsK3EResw) - [Add treemaps to the Security Incident Response overview](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_AddTreemapsToSIRHomepage.html?contentId=cSB5F_UlpJx7ElxaMD4JgA) - [Create or update a treemap category](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_DfnSvcImpctTmapDmn.html?contentId=_d3nVdXpJpIIe1KBBllJqg) - [Create or update a treemap indicator](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_CreateUpdateTreemapIndicator.html?contentId=tm2w4UW9FcTjGoJdTBq96w) - [Add vulnerability significance charts to an overview](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_AddVulnSignTreemaps.html?contentId=LKusFno_Zqdz0Xhn1puivA) - [Major Security Incident Management](https://www.servicenow.com/docs/r/security-management/security-incident-response/major-security-incident-management-landing-page.html?contentId=t65X7imxIeuCrxBXRVgNLg) - [Explore](https://www.servicenow.com/docs/r/security-management/security-incident-response/exploring-major-security-incident-management.html?contentId=TWQmBI_TQwAOvlcLNg6eDw) - [Major Security Incident Management](https://www.servicenow.com/docs/r/security-management/security-incident-response/major-security-incident-management.html?contentId=6xyc7cZO~6VrORnNqnXSaQ) - [Get started with MSIM](https://www.servicenow.com/docs/r/security-management/security-incident-response/get-started-with-msim.html?contentId=ZMpLz_QcmZSdwJxCcop_2A) - [Checklist for MSIM setup](https://www.servicenow.com/docs/r/security-management/security-incident-response/msim-checklist.html?contentId=Au7Cf~Ju0q726I7vDoaYYw) - [Major Security Incident Management roles](https://www.servicenow.com/docs/r/security-management/security-incident-response/msi-roles.html?contentId=ax~CMJooNmY6JClQvHGv~g) - [Environment reference for MSIM setup](https://www.servicenow.com/docs/r/security-management/security-incident-response/msim-environment-reference.html?contentId=d49AjOGO~_p1n1bew4IqcQ) - [Integrate](https://www.servicenow.com/docs/r/security-management/security-incident-response/integrate-with-other-applications.html?contentId=AROCWi9WZRi2LPoyku9wbA) - [Integrate Major Security Incident Management with Microsoft SharePoint](https://www.servicenow.com/docs/r/security-management/security-incident-response/integrate-msim-sharepoint.html?contentId=0LbjVWYpjlJgqvfcQc1l3A) - [Register application at Azure portal](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-azure-app-msim.html?contentId=oehfAEddcFTrbldxfMTMLw) - [Use certificates for authentication](https://www.servicenow.com/docs/r/security-management/security-incident-response/use-certificate-auth-msim.html?contentId=PudQiXqwdMmfnfKaIIVTkg) - [Configure Microsoft SharePoint with Major Security Incident Management](https://www.servicenow.com/docs/r/security-management/security-incident-response/config-sharepoint-msim.html?contentId=~oFxYMMQm5HtKm0TkoIC3w) - [Commands to grant Azure application access to the Microsoft SharePoint site](https://www.servicenow.com/docs/r/security-management/security-incident-response/grant-azure-app-access-sharepoint-site-commands.html?contentId=ODey_i3y4nck8EMy1dC7TA) - [Integrate Major Security Incident Management with Microsoft Teams](https://www.servicenow.com/docs/r/security-management/security-incident-response/integrate-teams-msim.html?contentId=PVDUVigbYiALvwRrJ1DXGg) - [Register an application at Azure portal for Microsoft Teams connections](https://www.servicenow.com/docs/r/security-management/security-incident-response/register-teams-app-msim.html?contentId=OwcN4O7S3xKeAS~efqE~Hw) - [Configure Microsoft Teams connection with Major Security Incident Management](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-teams-msim.html?contentId=BsdqlwPMpaqDIU1Ho1zywQ) - [Establish Microsoft Teams Graph connection on ServiceNow AI Platform](https://www.servicenow.com/docs/r/security-management/security-incident-response/msim-micorsoft-team-requirements.html?contentId=2l3J4lWmUpVjR4o6KTn10A) - [Use certificate for authentication](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-certificates-for-authentication.html?contentId=WA2345pLVCBgmqYwVltRAw) - [Attach a Java Key Store certificate for MS Teams](https://www.servicenow.com/docs/r/security-management/security-incident-response/attach-a-java-key-store-certificate-for-ms-teams.html?contentId=lVM2cA95jkBIQpRr48iM9A) - [Configure the JWT signing key for MS Teams](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-the-jwt-signing-key-for-ms-teams.html?contentId=5AhbR_SLX7P8u7WIU9k9OA) - [Configure the JWT provider for MS Teams](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-the-jwt-provider-for-ms-teams.html?contentId=fUz2N_bpA9dUsZCFlOxMTg) - [Establish a connection using certificates](https://www.servicenow.com/docs/r/security-management/security-incident-response/establish-a-connection-using-certificates.html?contentId=U_jBqhDJAkQVSvzg8gaSRg) - [Using Client Secret value](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-client-secret-value.html?contentId=ylnNfDud2QJKluztTVnC~Q) - [Establish a connection using client secret](https://www.servicenow.com/docs/r/security-management/security-incident-response/establish-a-connection-using-client-secret.html?contentId=qG60oJe~uL9511AmZHQLlw) - [Activate MS Teams chat connector](https://www.servicenow.com/docs/r/security-management/security-incident-response/activate-microsoft-teams-chat-connector-for-existing-users.html?contentId=AIDipRewaUzBqjgHbxCIFg) - [Major Security Incident Management Conference Call Integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/integrate-msim-conference-calls.html?contentId=85piLxVvbRfQHAvV_GHOnw) - [Start a conference call](https://www.servicenow.com/docs/r/security-management/security-incident-response/start-conference-call.html?contentId=~tby6sc9ZUAczKRVmmJIPQ) - [Add participants to a conference call](https://www.servicenow.com/docs/r/security-management/security-incident-response/add-participants-conference-call.html?contentId=~x4HmU~41OA8Aim6fZOciw) - [Mute participants in a conference call](https://www.servicenow.com/docs/r/security-management/security-incident-response/mute-unmute-participants.html?contentId=J0EWy2tj~KEB3_jI5OIjwA) - [View conference call details](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-conference-call-details.html?contentId=qvDAKc9jep~df5~UtQ5sug) - [Integrate MSIM Conference Calls with Microsoft Teams](https://www.servicenow.com/docs/r/security-management/security-incident-response/integrate-msim-conf-call-ms-teams.html?contentId=9DWvqx8v~81_~obIqNQmAg) - [Use the MSIM Conference Call Microsoft Teams integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-conf-call-ms-teams-integration.html?contentId=ucOIivHz1p2V6~noOswmFA) - [Integrate MSIM Conference Calls with Zoom](https://www.servicenow.com/docs/r/security-management/security-incident-response/integrate-msim-conf-calls-zoom.html?contentId=tdMraqJ4Ad2uvkxC84nQBA) - [Use the MSIM Conference Call Zoom integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-conf-call-zoom-integration.html?contentId=Jk8RNwV8Uc4aJ9ko4jgymA) - [Integrate MSIM Conference Calls with Cisco Webex](https://www.servicenow.com/docs/r/security-management/security-incident-response/integrate-msim-conf-calls-webex.html?contentId=zAirWiuAMRQ8swYkMddUvQ) - [Use the Conference Calls Cisco Webex integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-conf-call-webex-integration.html?contentId=aGgsX7BDJDL7BQIAArmvrg) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/configuring-major-security-incident-management.html?contentId=_l33shlVtgapR2uzd5sH4Q) - [Configure File Explorer Component](https://www.servicenow.com/docs/r/security-management/security-incident-response/file-explorer.html?contentId=M_l2BQ8BoNGn7o5SnwDafw) - [Get Started with File Explorer](https://www.servicenow.com/docs/r/security-management/security-incident-response/get-started-with-fe.html?contentId=3mz~JEb5PpuOtmyOuSOBYA) - [Configure File Explorer repository drive](https://www.servicenow.com/docs/r/security-management/security-incident-response/file-explorer-repository-config.html?contentId=mpJ_ce2KXD3tRaDem8qn0w) - [Configure Folder and File Action Settings](https://www.servicenow.com/docs/r/security-management/security-incident-response/folder-file-action-settings.html?contentId=5z3k7YR5NvcVETAuz3M3mg) - [Create Folder Templates](https://www.servicenow.com/docs/r/security-management/security-incident-response/file-explorer-folder-templates.html?contentId=tz31WCKCTcRJD9ymMw1XHA) - [File Explorer Activity Stream in Workspace](https://www.servicenow.com/docs/r/security-management/security-incident-response/activity-stream-on-the-workspace.html?contentId=UWPXj5iIZ5EqtzTYZXphvA) - [File Explorer troubleshooting](https://www.servicenow.com/docs/r/security-management/security-incident-response/file-explorer-troubleshooting.html?contentId=cmI4cBBap95oRDpv4OQUuQ) - [Configure Microsoft Teams](https://www.servicenow.com/docs/r/security-management/security-incident-response/chat-channel-provider-config.html?contentId=GYNWNPcwvUXYvz36_GKNAg) - [Get started with Microsoft Teams](https://www.servicenow.com/docs/r/security-management/security-incident-response/get-started-with-microsoft-teams.html?contentId=Nz8_pTcrM17q4WxsOI7n~Q) - [Activate MS Teams as a chat provider](https://www.servicenow.com/docs/r/security-management/security-incident-response/chat-provider-configuration.html?contentId=z8nhVXw8sCWYT_oGgyfqmw) - [Create a chat channel template](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-chat-channel-template-for-msim.html?contentId=NatM3981iOzVnGgYzrPu9A) - [View Chat Message Activity](https://www.servicenow.com/docs/r/security-management/security-incident-response/chat-message-activity.html?contentId=~HJqBijEtA~ouAo4txbvyw) - [Microsoft Teams Chat Connector troubleshooting for MSIM](https://www.servicenow.com/docs/r/security-management/security-incident-response/microsoft-teams-chat-connector-troubleshooting-for-msim.html?contentId=wH1X5Pi_snhULP2EFrOnYw) - [Configure Slack chat connector for major security incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-slack-chat-connector-msi.html?contentId=fu~6NDcMgba6qkjAzXiy6A) - [Get started with Slack chat connector configuration](https://www.servicenow.com/docs/r/security-management/security-incident-response/get-started-slack-chat-configuration.html?contentId=1OTxoN9QPaNzCYypcY3OYg) - [Create a chat channel template for Slack](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-chat-channel-template-slack.html?contentId=Up6P6WGQD3QpbkKl3j3XGw) - [Activate Slack as a channel provider](https://www.servicenow.com/docs/r/security-management/security-incident-response/activate-slack-channel-provider.html?contentId=Eo0O0jsexRuJ4YvBzBz9Lw) - [View chat message activities in Slack](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-chat-message-activities-slack.html?contentId=aGgyZW5Hu6M6tCQrkTSpHw) - [Customize SI to MSI flows (optional)](https://www.servicenow.com/docs/r/security-management/security-incident-response/customize-si-to-msi-flows-for-msim.html?contentId=oDQKdDS2m4q19jR8Ta9wiQ) - [Administer](https://www.servicenow.com/docs/r/security-management/security-incident-response/configuring-msi-administration-settings.html?contentId=owb7sncsK0~xyT0S927YeA) - [MSIM workspace](https://www.servicenow.com/docs/r/security-management/security-incident-response/msim-workspace.html?contentId=KgFZZAXrZs2METqMGOcjCA) - [Use](https://www.servicenow.com/docs/r/security-management/security-incident-response/major-security-incident-setup.html?contentId=F3HTZoOKX65lVTDRwteFGw) - [Propose, promote, and link incident records](https://www.servicenow.com/docs/r/security-management/security-incident-response/promoting-sir-to-msim.html?contentId=gYJJ86TBN5EjxGq3FGgfIg) - [Propose as a Major Security Incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/propose-as-msi.html?contentId=Hbd8XJ88ms6XjmRf6mY0xA) - [Promote to a Major Security Incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/promote-msi.html?contentId=i9gP8s8lh3Qyvba_TH1wVw) - [Link to Major Security Incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/link-si-msi.html?contentId=62oS_NZjOvfWwG0gjT9JrA) - [Using MSI List view in the MSIM workspace](https://www.servicenow.com/docs/r/security-management/security-incident-response/list-view-in-msim.html?contentId=hGhIG21b8KsF7dF70EJIVw) - [View Major Security Incident impact metrics](https://www.servicenow.com/docs/r/security-management/security-incident-response/viewing-trend-charts-and-progress-of-msi.html?contentId=2c2uECBBTezum1M4xFJbuA) - [View Major Security Incident trend charts](https://www.servicenow.com/docs/r/security-management/security-incident-response/viewing-msi-impact-metrics.html?contentId=~d~whDVChR3S7NlIqzF5AQ) - [Update Major Security Incident details](https://www.servicenow.com/docs/r/security-management/security-incident-response/msim-details-tab.html?contentId=TFAYM037SWYRHL_WMXLE5Q) - [Restrict access to certain major security incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/restrict-access-major-security-incidents.html?contentId=k2DisK1RjzIEj3wYF4rqNQ) - [Link additional records to Major Security Incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/linking-additional-records-to-major-security-incidents.html?contentId=W7ff8owTk73eR9nKHEj6cw) - [Unlink records from Major Security Incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/unlinking-msi-records.html?contentId=F03NJUvlkk_yGNkQ2LHaqA) - [Manage tasks in a Major Security Incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/tasks-tab.html?contentId=R3DOrZPAoR~curE4awjG0w) - [Manage tasks using the Visual Task Board](https://www.servicenow.com/docs/r/security-management/security-incident-response/manage-tasks-using-vtb.html?contentId=5nsL0TGfJ110rPyXg861wg) - [Manage tasks using the List view](https://www.servicenow.com/docs/r/security-management/security-incident-response/manage-tasks-using-list-view.html?contentId=oTitOnAgHx8izpvCW~hpNw) - [Track collaboration activity via MSIM workspace](https://www.servicenow.com/docs/r/security-management/security-incident-response/collab-tab.html?contentId=9e6iSx9xa_yLIU4jT7lL9A) - [Create and distribute MSIM Status Reports](https://www.servicenow.com/docs/r/security-management/security-incident-response/creating-and-distributing-major-security-incident-status-reports.html?contentId=7FYhIoelRObkZ49AuoN2Mg) - [Manage MSIM status reports](https://www.servicenow.com/docs/r/security-management/security-incident-response/reports-and-metrics.html?contentId=efUzBX_VZWF1WagLf9ONaQ) - [Configure Major Security Incident status reports](https://www.servicenow.com/docs/r/security-management/security-incident-response/manage-status-reports-for-major-security-incident-management.html?contentId=NjGXHTQcwqxYogk1LKA3MA) - [Create a Report Template](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-report-template.html?contentId=w_bIReyDNohXnld~8SOewA) - [Add Branding to your Report Templates](https://www.servicenow.com/docs/r/security-management/security-incident-response/add-branding-to-your-report-templates.html?contentId=S93Kh~YEmFm_ErU67ivz2w) - [Use Visualizations in Report Templates](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-widgets-in-your-report-templates.html?contentId=zu7lyI2puD4kTV0yqVDHSA) - [Use Reports Lists in Report Templates](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-reports-lists-in-your-report-templates.html?contentId=VbMRxDFgsSSwaYuEU064hw) - [Use Template Scripts in your Report Templates](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-template-scripts-in-your-report-templates.html?contentId=hEchMjnrMcZYBlcC_4yfDg) - [Preview the Report Template](https://www.servicenow.com/docs/r/security-management/security-incident-response/preview-status-reports.html?contentId=KxU2ZXbgdUUcuwDJAE9K3A) - [Create a Report Section Template](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-report-section-template.html?contentId=EbhA4h9tDvwotybmtCkUPg) - [Create a Report Subsection Template](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-report-subsection-template.html?contentId=s2D~x35fCzFK_B7FoWu6GA) - [Create Report Subsection Element template](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-report-subsection-element-template.html?contentId=~jD2p4DjF1T01hUaU5t4bw) - [Create a Free Form Type Element](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-free-form-type-element.html?contentId=vG4GmB1zvt6wT782etvhBg) - [Create a Visualization Type Element](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-visualization-type-element.html?contentId=t~RfkCTliqryfxYaI_fmcg) - [Create a List Type Element](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-list-type-element.html?contentId=EuKrzCzsIvrEuuTlM6rfuA) - [Create a Custom Type Element](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-a-custom-type-element.html?contentId=3Ug_K5QyP8uOytxNyHWzXA) - [Add system properties](https://www.servicenow.com/docs/r/security-management/security-incident-response/adding-system-properties-to-your-status-reports.html?contentId=D1dMLkxILBG3GD~gkqF1Gg) - [MSIM Playbooks](https://www.servicenow.com/docs/r/security-management/security-incident-response/msim-playbooks.html?contentId=gXUEfty1cPYtt10TNdnYhw) - [Playbook for Legal Request](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-legal-request.html?contentId=xwmi_UMPWjbHsMlbXS_yaA) - [Create processes for Legal Request playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-create-processes-legal-request.html?contentId=MxWu400AH_0zTse0tVnWBg) - [Using the Legal Request playbook](https://www.servicenow.com/docs/r/security-management/security-incident-response/playbook-using-the-legal-request.html?contentId=s6Dv5P5fcPG_2D8OiXH3~A) - [Rollup Framework for MSIM](https://www.servicenow.com/docs/r/security-management/security-incident-response/roll-up-framework-for-major-security-incident-management.html?contentId=PFYZE4doKHwYpYCy9pyCgQ) - [Configure Linked Records in Major Security Incident Management](https://www.servicenow.com/docs/r/security-management/security-incident-response/configuring-linked-records-in-major-security-incident-management.html?contentId=9tjuu53JuSEOGjmV2u6wBQ) - [Configure Rollup Records in Major Security Incident Management](https://www.servicenow.com/docs/r/security-management/security-incident-response/roll-up-record-configuration-in-major-security-incident-management.html?contentId=aWtjFclTwo2zrSjCQ6YvLQ) - [Configure List Layout in Major Security Incident Management](https://www.servicenow.com/docs/r/security-management/security-incident-response/list-layout-confguration.html?contentId=J8b3jPKbSR_B2YtElpepvw) - [Rollup example use case implementation for a Security Case](https://www.servicenow.com/docs/r/security-management/security-incident-response/use-case-for-a-security-case.html?contentId=_peto2SoNtRa3MPTGp~Umw) - [Step 1. Create linked record configuration](https://www.servicenow.com/docs/r/security-management/security-incident-response/creating-linked-record-configuration-for-security-case.html?contentId=m2iIwlZD5Tyae~GwpjPMfQ) - [Step 2. Create a view for modal window](https://www.servicenow.com/docs/r/security-management/security-incident-response/creating-a-view-for-modal-window-for-security-case.html?contentId=w5oe1wAWMMvlKBjRpaLDZg) - [Step 3. Create UI actions for Source Table](https://www.servicenow.com/docs/r/security-management/security-incident-response/creating-ui-actions-for-source-table.html?contentId=N2ScZDMpMqNaicla87LPVA) - [Step 4. Create view for Linked Record tab](https://www.servicenow.com/docs/r/security-management/security-incident-response/creating-a-view-for-the-new-linked-record-tab.html?contentId=wBRRr0Iej1tYKQVCLTdW3w) - [Step 5. Add Access Control Lists](https://www.servicenow.com/docs/r/security-management/security-incident-response/adding-access-control-lists-for-msim-workspace-users.html?contentId=FllsHuxYv~zzO3rHNislxg) - [Step 6. Create business rules](https://www.servicenow.com/docs/r/security-management/security-incident-response/creating-required-business-rules-for-security-case.html?contentId=ylvbrV5rurR1uSamy2eoSw) - [Step 7. Create rollup record configurations](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-rollup-record-configurations.html?contentId=f_m5iUBqGARQP7YFROaUhg) - [Perform on demand atomic rollup](https://www.servicenow.com/docs/r/security-management/security-incident-response/perform-on-demand-atomic-rollup.html?contentId=FlEfH9d7glxEEJ3LcPv9aw) - [Security Incident Response integrations](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir_integrations.html?contentId=rmOeT3miyJ44TqJ0~o1QlA) - [ArcSight ESM Event Ingestion integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/arcsight-esm.html?contentId=lv0P1YejWCWDOPFtXWkbFQ) - [Set up instance](https://www.servicenow.com/docs/r/security-management/security-incident-response/arcsight-esm-setup-sn.html?contentId=cDlMnaYdPBsfRnnPly8Hyg) - [Set up Query Viewer](https://www.servicenow.com/docs/r/security-management/security-incident-response/arcsight-esm-setup-queryviewer.html?contentId=gzbmJegVEJb3fdyqYgjMDw) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/arcsight-esm-install-configure.html?contentId=T_ewAA0rhOB2ZvwQ~inkXg) - [Use](https://www.servicenow.com/docs/r/security-management/security-incident-response/arcsight-esm-create-profile.html?contentId=iuBU8AcrWvHaEJNZig6bVw) - [Create a profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/arcsight-esm-create-profile-name.html?contentId=LJO6go4cJusycDMG8kityw) - [Select correlation events](https://www.servicenow.com/docs/r/security-management/security-incident-response/arcsight-esm-create-profile-eventsearch.html?contentId=xm5LNV3dZgkmc7BaQ7cm6w) - [Map event fields](https://www.servicenow.com/docs/r/security-management/security-incident-response/arcsight-esm-create-profile-about-mapping.html?contentId=3OOoUmFfd9fF2S2ky4yTQg) - [Create mappings for ArcSight ESM event ingestion integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/arcsight-esm-create-profile-mapping.html?contentId=h_wwC0atiNr_ShuDWUIIqg) - [Preview security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/arcsight-esm-create-profile-preview.html?contentId=VCjv7mBKd_YCi0k_Iee~lw) - [Create a schedule](https://www.servicenow.com/docs/r/security-management/security-incident-response/arcsight-esm-create-profile-schedule.html?contentId=p4Gz0HC3Ze4zlvszchT5VQ) - [Automate event updates](https://www.servicenow.com/docs/r/security-management/security-incident-response/arcsight-esm-create-profile-additional.html?contentId=3av7T~vmHY_8xhbc9F~kIQ) - [Integration Settings](https://www.servicenow.com/docs/r/security-management/security-incident-response/arcsight-esm-settings.html?contentId=mHlqcPrr16h0NUOjtwI4Rw) - [Troubleshoot](https://www.servicenow.com/docs/r/security-management/security-incident-response/arcsight-esm-troubleshoot.html?contentId=3GSZN0e4F9pHnnbhf5M7EA) - [Copy profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/arcsight-esm-copy-profile.html?contentId=j_33NuYFeVUxbRPH2TFmQQ) - [Format correlation event values](https://www.servicenow.com/docs/r/security-management/security-incident-response/arcsight-esm-create-profile-script.html?contentId=0ratDiVo0g6iSiXU_B3jYA) - [Subflow execution](https://www.servicenow.com/docs/r/security-management/security-incident-response/arsight-esm-flows-actions.html?contentId=W7g0w9M~Uq7NuAnP9pPSaQ) - [Amazon Web Services (AWS) Security Hub integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/aws-security-hub-integration.html?contentId=8aEbe6k0VNWvjZDbtEkehw) - [Explore](https://www.servicenow.com/docs/r/security-management/security-incident-response/get-started-with-aws-security-hub-integration.html?contentId=V3y4Zbstwg_6DwSQ29_3WA) - [Register](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-aws-security-hub.html?contentId=Em4SUMyDXUG46b0KECf_Sw) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/install-and-configure-aws-security-hub-integration.html?contentId=fen9Xu1VhT1OMD33rJ6P1w) - [Create profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-a-profile-for-aws-security-hub-integration.html?contentId=WWMlRwKOmhghmIH92vJr6g) - [Map finding fields](https://www.servicenow.com/docs/r/security-management/security-incident-response/map-aws-security-hub-finding-fields.html?contentId=MpvOGglFhu0n6KEeSXq_eA) - [Define filter and aggregation criteria](https://www.servicenow.com/docs/r/security-management/security-incident-response/aws-security-hub-profile-filter-and-aggregation-criteria.html?contentId=1iv8xbiD6JfclfIxQ7bDOQ) - [Schedule finding retrieval](https://www.servicenow.com/docs/r/security-management/security-incident-response/schedule-retrieve-and-ingest-finding-data.html?contentId=23h23HrS2eVaHWxAASFnaQ) - [Automate updates and closures](https://www.servicenow.com/docs/r/security-management/security-incident-response/automate-security-hub-finding-updates.html?contentId=Qx0ZiEMdAJWzJu2Nw5Z6ug) - [Preview findings](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-form-after-findings-ingestion.html?contentId=W8F82PtusoMd2L9tz7Bl7Q) - [AWS Domain Separation](https://www.servicenow.com/docs/r/security-management/security-incident-response/aws-domain-separation.html?contentId=EQF_WemnueALSvKuLMXOYg) - [Carbon Black - Incident Enrichment integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/carbon-blk-inc-enrich-landing-page.html?contentId=N3weqovECuPAot1n5ii21g) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/activate-configure-carbonblack-inc-enrich.html?contentId=qFvuPECDSi_sr6yLRmglHw) - [Carbon Black integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/carbon-black-landing-page.html?contentId=a4ET45ASf5~63qe3dWxlrw) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/activate-configure-carbonblack.html?contentId=M5KBDCGa5KXCFiQrbCvnHQ) - [Check Point Anti-bot - Email Parser integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/checkpt-antibot-integration.html?contentId=FPxJDr9FEk7bHe7XvZM2Lg) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-checkpt-antibot.html?contentId=EMgmwK~rokb~3U~CQW79gg) - [Check Point Next Generation Threat Prevention integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/check-point-ng-integration.html?contentId=9B0Urjt03FTRlR~4bexCnQ) - [Check Point NGTP setup](https://www.servicenow.com/docs/r/security-management/security-incident-response/chk-pt-ngtp-setup.html?contentId=HeGCVde6H45IEIQ90LGzyA) - [Create API account](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-api-acct.html?contentId=sr1rsyQV3dmM9OFQGcHB3g) - [Set up integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/set-up-chk-pt-ngtp.html?contentId=qSowRs3eZOQhK2Jdfein_A) - [Activate](https://www.servicenow.com/docs/r/security-management/security-incident-response/activate-chk-pt-ngtp-integration.html?contentId=ARX7NQVxDnUmKWJeRj5xwg) - [Working with block lists](https://www.servicenow.com/docs/r/security-management/security-incident-response/working-with-block-lists.html?contentId=5w0XxWBKsh79JLmkQGSvwQ) - [Create a block list](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-block-list-for-chk-pt-ngtp.html?contentId=3rJAb6xC2bdiL7AIW9BNVg) - [Activate a block list](https://www.servicenow.com/docs/r/security-management/security-incident-response/activate-blk-list.html?contentId=IoXKZSmseDTv1Tfe~WWFEQ) - [Configure a block list](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-blk-list-as-custom-intell-feed.html?contentId=_9S9wQM_qeGwtj20kFRAzw) - [Submit entries from incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/submit-blk-list-entries-from-si.html?contentId=hsQAU8a0ngcCuC9kf3kDUQ) - [Submit entries from Block List](https://www.servicenow.com/docs/r/security-management/security-incident-response/submit-blk-list-entries-from-table.html?contentId=guIvTBbHJCPUBEGLRAAMwg) - [Approve block list entries](https://www.servicenow.com/docs/r/security-management/security-incident-response/approve-blk-list-entries.html?contentId=l1bhQreLzEYBA0ay6EL4cQ) - [Block list entry exceptions](https://www.servicenow.com/docs/r/security-management/security-incident-response/block-list-exceptions.html?contentId=Cb_9FKrRjVSucJSbwgGhFA) - [Edit the security tag name](https://www.servicenow.com/docs/r/security-management/security-incident-response/edit-sec-tag-name-optional.html?contentId=NSeRhzmk8FhBQDGM7PFRqg) - [Uninstall the Check Point NGTP integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/Uninstall-check-point-ngtp.html?contentId=hYSmJocDgwZEu4Tv~SmlzQ) - [CrowdStrike Falcon Host integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/crowdstrike-falcon-host-landing-page.html?contentId=~qexl5fFgFYdyHd174J6qg) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/activate-configure-crowdstrike-host.html?contentId=ABXRB1c7blIdrf0fWL5KZw) - [Explore](https://www.servicenow.com/docs/r/security-management/security-incident-response/secops-integration-crowdstrike-publish.html?contentId=hdjgHsQ~Kj3N6lK3oQ11SA) - [CrowdStrike Falcon Insight integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/CrowdStrike-Falcon-Insight-for-Security-Operations-integration.html?contentId=fU8jNI_fjHwy31adzsM2bg) - [Explore](https://www.servicenow.com/docs/r/security-management/security-incident-response/get-started-with-the-crowdstrike-falcon-insight-integration.html?contentId=RicG9URmOWHbXiNCYNi7wA) - [Generate client ID and secret key](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-api-clients-and-keys.html?contentId=rlZfrJr24b8dRiQXgZXYmw) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/install-and-configure-crowdstrike-falcon-insight.html?contentId=7c1OIprbDnB6gzru0~aCwA) - [Create an approval group](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-approval-group.html?contentId=U1s_4M34iaXDBvAi8ERpcw) - [Create profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-a-capability-profile-for-the-crowdstrike-falcon-insight-integration.html?contentId=PCnU9BvtOkpq9kJbzfSiQg) - [Configure profile settings](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-profiles-and-security-incidents-for-the-crowdstrike-falcon-insight-integration.html?contentId=nU6rysaPJY8KQ2r~xMDRCA) - [Set trigger condition](https://www.servicenow.com/docs/r/security-management/security-incident-response/define-trigger-conditions.html?contentId=K6PQqNEKuB6_qXLLBzcnRQ) - [Verify trigger conditions](https://www.servicenow.com/docs/r/security-management/security-incident-response/verify-integration-configuration.html?contentId=6geSojQlbssaIaOKw9JzNQ) - [Trigger profile manually](https://www.servicenow.com/docs/r/security-management/security-incident-response/manually-trigger-profile-from-security-incident.html?contentId=SVlSpMqRScPKMaibWXWDgg) - [Create and configure a profile for the sighting search](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-and-configure-a-profile-for-sightings-search-with-the-crowdstrike-falcon-insight-integration.html?contentId=p4_Qh6EKmAJ3yk1vc69VSg) - [Create indicators](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-indicator-cs-falcon-insight.html?contentId=2SFdTdYC21Rgoe1XVyFigA) - [Block Request Category List](https://www.servicenow.com/docs/r/security-management/security-incident-response/cs-fal-in-block-req-category.html?contentId=JJpPWnI39oe180VxWB0cDw) - [Block List Entries](https://www.servicenow.com/docs/r/security-management/security-incident-response/cs-fal-insight-block-list-entries.html?contentId=C2DDbvKxZPhF4vPj0IaS_g) - [Allow List Entries](https://www.servicenow.com/docs/r/security-management/security-incident-response/cs-fal-insight-allow-list-entries.html?contentId=ZRHCuVgcb6UAqdwFe3yynA) - [Trigger additional actions](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-additional-crowdstrike-falcon.html?contentId=E8eteXJWZpQ1W3jFLKOhpA) - [Use](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-crowdstrike-falcon-host-integration-aws.html?contentId=VUUtHUCkPwJq5FMbz_MUHg) - [CrowdStrike Next-Gen SIEM integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/crowdstrike-next-gen-integration-secops.html?contentId=INLMN_qmNOMLmqCAIkpbTw) - [Explore](https://www.servicenow.com/docs/r/security-management/security-incident-response/get-started-with-cs-ng-siem-integration.html?contentId=98Tt7FtQNPQtFJrJwwccJw) - [Install and configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/cs-ng-siem-integration.html?contentId=gKaMmO7~D0jq~j5R44pF9w) - [Create a detection profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-a-profile-cs-ng-siem.html?contentId=dxj~SplMhFgAgpnXceL2Jw) - [Set correlation rules](https://www.servicenow.com/docs/r/security-management/security-incident-response/select-correlation-rules-cs-ng-siem.html?contentId=ch1g6Qbqtb_AoE0xikrr5A) - [Map detection fields](https://www.servicenow.com/docs/r/security-management/security-incident-response/map-crowdstrike-next-gen-inc.html?contentId=uQufrA5Z7wGpSGB8__Z7JA) - [Define filter and aggregation criteria](https://www.servicenow.com/docs/r/security-management/security-incident-response/filtering-and-aggregation-cs-ng-siem.html?contentId=Rs_mzyTRFSTnDF2GfHhpAw) - [Schedule detection retrieval](https://www.servicenow.com/docs/r/security-management/security-incident-response/schedule-retrieve-and-ingest-inc-data.html?contentId=AaoT3A94ZCxqIGyNKsIJYg) - [Automate detection updates](https://www.servicenow.com/docs/r/security-management/security-incident-response/automate-inc-crowdstrike-ng.html?contentId=99Ujrb0_vmxGFrXVF8lNPw) - [CrowdStrike Falcon X Sandbox integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/crowdstrike-falcon-sandbox-overview.html?contentId=zQpTKM2nBla3NvxweVqZog) - [Install and configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/crowdstrike-falcon-sandbox-getting-started.html?contentId=uLYsyHAZ4nzzGctdb_XxOg) - [Set up submission configurations](https://www.servicenow.com/docs/r/security-management/security-incident-response/setup-sandbox-submission-configurations.html?contentId=znCkJrugC0~s1JjhMOrjaw) - [Submit observables to Sandbox](https://www.servicenow.com/docs/r/security-management/security-incident-response/submit-files-or-urls-to-sandbox.html?contentId=xkfnVS2qsaRSQd0rbWCKpA) - [Automate submissions](https://www.servicenow.com/docs/r/security-management/security-incident-response/flow-designer-crowdstrike-falcon-sandbox-integration.html?contentId=bg2ZMIn3QkKpiglEdD90Og) - [Monitor submission results](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-sandbox-submission-results.html?contentId=tHgR0lORQER309eTC6NrfQ) - [Tag security incidents with the Sandbox submission status](https://www.servicenow.com/docs/r/security-management/security-incident-response/sandbox-tags.html?contentId=cV_Ua5hXYg33inmtMo3JWg) - [Review global settings](https://www.servicenow.com/docs/r/security-management/security-incident-response/review-sandbox-global-settings.html?contentId=SutcRY9Ta7vQzjTERUt3pA) - [Elasticsearch Incident Enrichment integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/elasticsearch-landing-page.html?contentId=8Ks1Nw7UlUnD_07W91~KgQ) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/activate-configure-elasticsearch.html?contentId=x8FlwEFNoVi8ZywIMYAYUQ) - [FireEye Endpoint Security integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/fireye-overview.html?contentId=UbpSfP8uE29g5AmNtUaoBQ) - [Set up instance](https://www.servicenow.com/docs/r/security-management/security-incident-response/fireeye-setup-procedure.html?contentId=GhcVwoXhzPZoJcxK2UsJcw) - [Timestamp settings](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-timestamp-settings.html?contentId=aK085MA6s0LGTSMNjve0og) - [Configure integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/fireeye-install-configure-source.html?contentId=jNX_xWhiv3gbPdTpz2dSow) - [FireEye Default Settings](https://www.servicenow.com/docs/r/security-management/security-incident-response/additional-configurations.html?contentId=TtuCrug9n4zEYFwvAt47vQ) - [create a profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-capability-profile-for-fireeye-hx-integration.html?contentId=gjNuBkRdqpRHW3Ru64_dgQ) - [Explore](https://www.servicenow.com/docs/r/security-management/security-incident-response/understand-trigger-conditions-work-with-configuration-item.html?contentId=QgMf6kIHAD1ojJXvjAPWig) - [Configure profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-profiles-security-incidents-for-fireeye-integration.html?contentId=BnOf7IVlqT8pTofzXzhdwg) - [Verify the Trigger Condition Filters](https://www.servicenow.com/docs/r/security-management/security-incident-response/verify-the-configured-trigger-conditions.html?contentId=H7aWaU0m7qJR6XK1aVFZkQ) - [Trigger a FireEye capability profile from Related Links](https://www.servicenow.com/docs/r/security-management/security-incident-response/trigger-fireeye-capability-profile.html?contentId=RSGGf0la9cmouh4RZpUx~A) - [Trigger a capability profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/trigger-fireeye-capability-related-list.html?contentId=SioVdKyPY6lyzlVfUtbErA) - [FireEye Get File Capability](https://www.servicenow.com/docs/r/security-management/security-incident-response/fireeye-get-capability.html?contentId=hlc9e8q9DNMbAkEibK_6xA) - [FireEye Additional Actions on Endpoint](https://www.servicenow.com/docs/r/security-management/security-incident-response/fireeye-additional-actions-on-endpoint.html?contentId=GzTKm4SuYHKrIZra97vqgA) - [configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-configure-profile-for-sightings-search-with-fireeye-integration.html?contentId=GnZd_eMkjPpB3YwWAYYvEw) - [Invoke Sighting Search from a Security Incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/invoke-sighting-search-from-security-incident.html?contentId=CmmCZugVJ0xQ5RMWepCG5A) - [Have I been pwned? integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/haveibeenpwned-landing-page.html?contentId=7z9p3h6P_ENyNHm8njpM7A) - [Have I been pwned? integration setup](https://www.servicenow.com/docs/r/security-management/security-incident-response/haveibeenpwned-setup.html?contentId=F95P_NMVRKGXGdZl2jH_Yw) - [Threat Lookup - Have I been pwned? flow](https://www.servicenow.com/docs/r/security-management/security-incident-response/threat-lookup-haveibeenpwned-wf.html?contentId=7Z6L2G33n8DE9uO2q64QHQ) - [Activate](https://www.servicenow.com/docs/r/security-management/security-incident-response/activate-haveibeenpwned.html?contentId=gBqKWn~Kb3JpNa82HzjP6A) - [Update X.509 certificate](https://www.servicenow.com/docs/r/security-management/security-incident-response/update-cert-pawnd.html?contentId=gS1OMpC31T1nHQjsPlZBRA) - [HPE Security ArcSight ESM - Email Parser integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/arcsight-emailparser-integration.html?contentId=DZCsyqLul12uFZugeGg1iw) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-arcsight-emailparser.html?contentId=IDIz4zA1q_ZCiXjdvN2m0g) - [HPE ArcSight Logger - Incident Enrichment integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/arcsight-logger-landing-page.html?contentId=_1XaenouxldZv3Lv8wh5GA) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/activate-configure-arcsight-inc-enrich.html?contentId=wBS6YUowndfFdYtprMKgqQ) - [Hybrid Analysis integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/hybrid-analysis-lookups.html?contentId=RblGNe4cqx89CyPddcoVwg) - [Install and configure Hybrid Analysis](https://www.servicenow.com/docs/r/security-management/security-incident-response/install-and-configure-hybrid-analysis.html?contentId=rfmWMP1FUTABI7kVF_I0VQ) - [Verify expected results for Hybrid Analysis](https://www.servicenow.com/docs/r/security-management/security-incident-response/verify-expected-results-hybrid-analysis-.html?contentId=BhP~VzKWEqoVu7zAx2qzkA) - [(Optional) Manually attach an observable for Hybrid Analysis](https://www.servicenow.com/docs/r/security-management/security-incident-response/attach-an-observable-manually-hybrid-analysis.html?contentId=yr9OcoDvPL6YxWH7HFDD0Q) - [IBM QRadar Offense Ingestion Integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/qradar-ibm.html?contentId=UpT1Fr~E6XEMpJzI~3l8bA) - [Install and configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/qradar-ibm-install-configure.html?contentId=NYrBTJiWWkUXSuL3OzndDw) - [Set up instance](https://www.servicenow.com/docs/r/security-management/security-incident-response/qradar-ibm-setup-sn.html?contentId=Ih4lhlEG6t1rlXsCTuh3zg) - [Setup IBM QRadar profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/qradar-ibm-create-profile.html?contentId=0n~hPpwR26aHausNUY52Kw) - [Create a profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/qradar-ibm-create-profile-name.html?contentId=9iXcHzhu9VfrJljOpVlbPg) - [Select IBM QRadar rules](https://www.servicenow.com/docs/r/security-management/security-incident-response/qradar-ibm-create-profile-eventsearch.html?contentId=3L3Va8eEwdgH_GgV2BiohQ) - [Map offense fields](https://www.servicenow.com/docs/r/security-management/security-incident-response/qradar-ibm-create-profile-about-mapping.html?contentId=jWw8w4aUKFtgUO1RbQptUQ) - [Ingesting the sample IBM QRadar offenses](https://www.servicenow.com/docs/r/security-management/security-incident-response/qradar-ibm-create-profile-ingestion.html?contentId=z~gjEcY3dbrfrd4xJfokQA) - [Map offense fields](https://www.servicenow.com/docs/r/security-management/security-incident-response/ibm-qradar-mapping-process.html?contentId=PLJYFgY_U9XqXDrcLbWf9A) - [Preview security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/qradar-ibm-create-profile-preview.html?contentId=DWjYPkEv3ZqsAn11tOJyuQ) - [Define schedule](https://www.servicenow.com/docs/r/security-management/security-incident-response/qradar-ibm-create-profile-schedule.html?contentId=Pb8wr2Fharyzr02yl5qIOQ) - [Automate offense updates](https://www.servicenow.com/docs/r/security-management/security-incident-response/qradar-ibm-create-profile-additional.html?contentId=EfhBCGclmD40va9bGX78eQ) - [Configuration settings](https://www.servicenow.com/docs/r/security-management/security-incident-response/qradar-ibm-intg-settings.html?contentId=CTNOs1KdmI4vXLDhOXPQng) - [Optional: Copy a IBM QRadar profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/qradar-ibm-copy-profile.html?contentId=yD5xWgxdfhwTuZ3fNbPeAQ) - [Domain separation and IBM QRadar Offense Ingestion](https://www.servicenow.com/docs/r/security-management/security-incident-response/qradar-ibm-domain-sep.html?contentId=ZHT0nmD9boEkvmJQJmjRJQ) - [Security Incident Response form after offense ingestion](https://www.servicenow.com/docs/r/security-management/security-incident-response/qradar-ibm-sir-changes.html?contentId=YTZosTUwerJoSR9noOrXGA) - [Use](https://www.servicenow.com/docs/r/security-management/security-incident-response/ibm-qradar-flow-designer.html?contentId=uYOz73o_PZFklp2T4Aut~w) - [Troubleshoot](https://www.servicenow.com/docs/r/security-management/security-incident-response/ibm-qradar-trouble.html?contentId=kAtv3qR6R8yN8VnDfeX0pw) - [IBM QRadar - Incident Enrichment Integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/qradar-landing-page.html?contentId=L9Nk5CRRwf4ybSOB~_87DA) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/activate-configure-qradar-inc-enrich.html?contentId=kizVW19Ae6nD1xbBCwV5sA) - [LogRhythm Overview](https://www.servicenow.com/docs/r/security-management/security-incident-response/ovrview-logrhythm.html?contentId=wh8J8DLJplIorHKEOj71NA) - [Set up the REST API](https://www.servicenow.com/docs/r/security-management/security-incident-response/drilldown-api-lr.html?contentId=sxO3IzTjw9BpUp7j0wfbag) - [Install and configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/install-and-config-logrhythm.html?contentId=jawDH8XETNYN~tLMaAsauA) - [Create an alarm profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-alarm-profile-logrhythm.html?contentId=8RuJSDb2WZi1nM4i_j3bqA) - [Mapping](https://www.servicenow.com/docs/r/security-management/security-incident-response/mapping-logrhythm.html?contentId=9eThfGS5kKG5ii4YQGxgaw) - [Map LogRhythm alarm fields to security incident fields](https://www.servicenow.com/docs/r/security-management/security-incident-response/logrhythm-map-alarms.html?contentId=7DGfbfTiFHZyC~UicxeXwQ) - [Filter alarms for LogRhythm](https://www.servicenow.com/docs/r/security-management/security-incident-response/filter-alarms-logrhythm.html?contentId=l7twDFPkWYYTdwnfoOIMGw) - [Previewing the security incident with mapped LogRhythm alarm values](https://www.servicenow.com/docs/r/security-management/security-incident-response/preview-si-logrhythm.html?contentId=7siZ6NVfaqHhk_mBN~0RGw) - [Schedule and retrieve LogRhythm alarms](https://www.servicenow.com/docs/r/security-management/security-incident-response/schedule-and-alarm-retrieval-logrhythm.html?contentId=x07U371Pb0B29PYA6FFJIw) - [Additional options for LogRhythm alarms](https://www.servicenow.com/docs/r/security-management/security-incident-response/verify-alarm-closure-logrhythm.html?contentId=nQkatfZ0ZV3JGOkhlxh6kg) - [Additional configurations for the LogRhythm integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-system-and-troubleshooting-properties.html?contentId=6dzYEDxSDSJVilvvd9F12A) - [Format field values](https://www.servicenow.com/docs/r/security-management/security-incident-response/add-scripted-values-logrhythm.html?contentId=uemkPc7b8VoejkLwf4WEDA) - [Copy alarm profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/copy-alarm-profile-logrhythm.html?contentId=gLWsvrohR5v1fSATdzKh0Q) - [Disable automated alarm](https://www.servicenow.com/docs/r/security-management/security-incident-response/disable-auto-alarm-logrhythm.html?contentId=RaLpwNVrP966gvZjGZNxKQ) - [View drill down events](https://www.servicenow.com/docs/r/security-management/security-incident-response/drilldown-events.html?contentId=LlJ1PMuXl5a0MylFXzruOQ) - [Troubleshooting the LogRhythm integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/troubleshooting-logrhythm-integration.html?contentId=fIk7rj7IWlf1k63cTQXRuw) - [Verify connectivity for LogRhythm](https://www.servicenow.com/docs/r/security-management/security-incident-response/verify-connectivity.html?contentId=d~s0SdCCqJNpcvckh6fEaA) - [Script execution and system log for LogRhythm](https://www.servicenow.com/docs/r/security-management/security-incident-response/script-execution-logrhythm.html?contentId=lIDrq8Sm1m4OWCiNASSVjA) - [McAfee ePO integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/mcaffee-epo-overview-arch.html?contentId=_dD4sSOTPNMR9uoMqd~KTQ) - [Explore](https://www.servicenow.com/docs/r/security-management/security-incident-response/mcafee-epo-integration-architecture.html?contentId=o3h5hYVJ1h0zrE1KIw6pPg) - [Checklist](https://www.servicenow.com/docs/r/security-management/security-incident-response/mcafee-epo_checklist.html?contentId=C~YrutFHmYdvBd2j1RDNGg) - [Set up instance](https://www.servicenow.com/docs/r/security-management/security-incident-response/mcaffee-epo-setup-now.html?contentId=ZvKZ4AjQyXbDUMDr5wdRHA) - [Set up console](https://www.servicenow.com/docs/r/security-management/security-incident-response/mcafee-epo-setup-mcafee.html?contentId=z8GyZuSIGqhiW5NxsKapVA) - [Install and configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/mcaffe-epo-install.html?contentId=FjGaCPYLP7p0NmRzVvowOQ) - [Edit security tags](https://www.servicenow.com/docs/r/security-management/security-incident-response/mcafee-epo-match-tags.html?contentId=Q3d35xWdhEDJEOHqoZvUzA) - [Create an approval group](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-approval-group-mcafee.html?contentId=eGvDBN1TMLKcCtIrggwTNw) - [Capability profiles](https://www.servicenow.com/docs/r/security-management/security-incident-response/mcafee-epo-creating-profiles.html?contentId=y4xbM638ZPsTsN2C81eaUw) - [Create a capability profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/mcafee-epo-create-profile.html?contentId=RzvOYYyrh0QEmp~ou1gNVg) - [Define triggering conditions](https://www.servicenow.com/docs/r/security-management/security-incident-response/mcafee-epo-alternate-ci.html?contentId=6jc6z3URmjUsu9oFzdcORg) - [Configure settings](https://www.servicenow.com/docs/r/security-management/security-incident-response/mcafee-epo-configuring-profile.html?contentId=bHSiEIHKrA_2GANyM3XPew) - [Configure the profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/mcafee-epo-configure-profile.html?contentId=_es_xxB5R0Fk8cMoV5MIXg) - [Initiate malware scan](https://www.servicenow.com/docs/r/security-management/security-incident-response/mcafee-epo-config-scan-malwr.html?contentId=SE1f7xfXE1_EcrX1stXl9A) - [Trigger profile manually](https://www.servicenow.com/docs/r/security-management/security-incident-response/mcafee-epo-submit-ih-fm-si.html?contentId=Ap4M5eeziLwy_RWWG_LeyQ) - [Trigger additional actions](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-additional-actions-mcafee.html?contentId=rqV0FqYZVkSgpPlcy_TXXA) - [Use](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-mcafee-integration-aws.html?contentId=DPgyjRV_lNAxqf8EHUaG7w) - [Initiate malware scan](https://www.servicenow.com/docs/r/security-management/security-incident-response/mcafee-epo-test-incident-malscan.html?contentId=dOi89Mxmob80ldxtblevMQ) - [Test incidents and approve requests](https://www.servicenow.com/docs/r/security-management/security-incident-response/mcafee-epo-test-incident-ih.html?contentId=3cMD9wBXqGyMtCqBlL9ILA) - [Edit a tag](https://www.servicenow.com/docs/r/security-management/security-incident-response/mcafee-epo-edit-security-tag.html?contentId=ZD62uZHG~RjisBoPUmKs5Q) - [McAfee ESM - Email Parser integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/mcafee-esm-emailparser-integration.html?contentId=RzgLV4c75fkuot0Izld96g) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-mcafee-esm-emailparser.html?contentId=WknAfzmC2bAQn~IBVAsC3Q) - [McAfee ESM - Incident Enrichment Integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/mcafee-esm-landing-page.html?contentId=J7lO4iFPrxWE7j~Cb2isPg) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/activate-configure-mcafee-esm-inc-enrich.html?contentId=sAWVbg57hccJDdPOUmZVMw) - [Microsoft Azure Sentinel integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/microsoft-azure-sentinel-integration.html?contentId=f58sXb4k9KkHkJeEoOehtg) - [Explore](https://www.servicenow.com/docs/r/security-management/security-incident-response/get-started-with-microsoft-azure-sentinel-integration.html?contentId=JeJrokYgDmXlE1fcvvE2Ig) - [Register and configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-microsoft-azure-portal.html?contentId=fV9HXqpiyAoVZuoqCTblMw) - [Install and configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/install-and-configure-microsoft-azure-sentinel-integration.html?contentId=WAJgYob6MpowmN2HctxFkA) - [Create profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-a-profile-for-microsoft-azure-sentinel-integration.html?contentId=WFDxnfhrR~GDQDPI1qGRAA) - [Map incident fields](https://www.servicenow.com/docs/r/security-management/security-incident-response/map-azure-sentinel-incident-fields.html?contentId=I2A4LQfQjSC212lJkAzWJA) - [Set filter conditions](https://www.servicenow.com/docs/r/security-management/security-incident-response/filter-and-aggregation-criteria.html?contentId=49shdi8ITEUrGlpxpiPbPA) - [Schedule data retrieval](https://www.servicenow.com/docs/r/security-management/security-incident-response/schedule-retrieve-and-ingest-incident-data.html?contentId=t~oCc50VVC_ksXfNGFDUTw) - [Automate incident updates](https://www.servicenow.com/docs/r/security-management/security-incident-response/automate-incident-updates.html?contentId=Q5SJU51MLRryCnL9LulAdw) - [Copy profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/copy-an-azure-sentinel-profile.html?contentId=gSUW~g88uoigDqgk1Yk4_A) - [Review record](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-form-after-incident-ingestion.html?contentId=kVRsFsnSN4kPce13oFcXyA) - [Review settings](https://www.servicenow.com/docs/r/security-management/security-incident-response/sentinel-integration-settings.html?contentId=clmQS6ibiPWrNDOxEszawQ) - [Domain separation](https://www.servicenow.com/docs/r/security-management/security-incident-response/azure-sentinel-domain-separation.html?contentId=ibfRmk6aQOKjHpJbdBU6bw) - [Compare integrations](https://www.servicenow.com/docs/r/security-management/security-incident-response/comparing-azure-sentinel-and-graph-security-api-integrations-with-sir.html?contentId=nBNOQJw8ckMpGGpa1MaRWg) - [Microsoft Defender for Endpoint integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/microsoft-defender-for-endpoint-integration.html?contentId=g3S1Ei0uIkctYTNaGWc3Jw) - [Register and configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-ms-azure-portal-using-defender-endpoint-api.html?contentId=v8v4LRdlyfbDw~Wt03e5Uw) - [Explore](https://www.servicenow.com/docs/r/security-management/security-incident-response/set-up-microsoft-defender-for-endpoint.html?contentId=k71X5L~xZPWGlYBoQiHnMg) - [Install and configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/install-microsoft-defender-source.html?contentId=BR6Kaq7vplaeN4KOM8X1wA) - [Additional configuration settings](https://www.servicenow.com/docs/r/security-management/security-incident-response/microsoft-defender-default-settings.html?contentId=y8WKOavaTFfnM0i0csCA8g) - [Map Observable type](https://www.servicenow.com/docs/r/security-management/security-incident-response/map-the-ms-defender-for-endpoint-indicator-types.html?contentId=F1ydrf_1m2a_WMdHZeB_Iw) - [Create capability profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-capability-profile-for-microsoft-defender-for-endpoint.html?contentId=g8~pQm9EpoPh_Dl0nEL3_A) - [Trigger conditions](https://www.servicenow.com/docs/r/security-management/security-incident-response/trigger-conditions-configuration-item.html?contentId=_AveJMpWjBA_pdVfOv22mA) - [Configure a profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-profiles-and-security-incidents-for-ms-defender-for-endpoint.html?contentId=8tAfHkv_NX7y1yfLu~OdeA) - [Verify trigger condition filters](https://www.servicenow.com/docs/r/security-management/security-incident-response/verify-the-trigger-condition-filters.html?contentId=Mc1GTmnL2rH52jgG8el35A) - [Trigger capability profile from related links](https://www.servicenow.com/docs/r/security-management/security-incident-response/trigger-ms-defender-endpoint-profile-related-links.html?contentId=JSc~6ds8S8A~NPybaVPf7g) - [Trigger capability profile from configuration item related list](https://www.servicenow.com/docs/r/security-management/security-incident-response/trigger-ms-defender-endpoint-profile-ci-relatedlist.html?contentId=ngAgu3NJm4bSFWpwtout1w) - [Additional Configurations](https://www.servicenow.com/docs/r/security-management/security-incident-response/additional-configurations-in-defender.html?contentId=RYE_SDiY_fx2ITLdYT5Dmg) - [Configure Isolate Host capability](https://www.servicenow.com/docs/r/security-management/security-incident-response/isolate-host-ms-defender-for-endpoint.html?contentId=CQd5kyreQe62mN1XGZcNlA) - [Configure Remove Host Isolation capability](https://www.servicenow.com/docs/r/security-management/security-incident-response/remove-isolation-ms-defender-for-endpoint.html?contentId=vDGgyj9vqmpp_nujXg_irA) - [Configure Run Antivirus Scan capability](https://www.servicenow.com/docs/r/security-management/security-incident-response/run-antivirus-scan-capability-ms-defender.html?contentId=WCc20BBDztSQnJq325g19A) - [Configure Restrict App Execution capability](https://www.servicenow.com/docs/r/security-management/security-incident-response/restrict-app-execution-capability-ms-defender.html?contentId=l1o_PJlIqjBAvl0SH4sYHg) - [Configure Remove App Restriction capability](https://www.servicenow.com/docs/r/security-management/security-incident-response/remove-app-restriction-capability-ms-defender.html?contentId=K0TTvo5yZGQVk~2d3mBjLA) - [Configure Get Related Machines from Defender capability](https://www.servicenow.com/docs/r/security-management/security-incident-response/get-related-machines-defender-capability-ms-defender.html?contentId=ea93IdPTi1hbPyxQqDVlqA) - [Configure Stop and Quarantine File capability](https://www.servicenow.com/docs/r/security-management/security-incident-response/stop-and-quarantine-file-capability.html?contentId=UqwHUUR6fc2FHocYjmb90A) - [Create and configure profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-and-configure-profile-sightings-search-with-ms-defender.html?contentId=5EpwPjlLvv2bd1pytDUBtw) - [Perform manual sighting search](https://www.servicenow.com/docs/r/security-management/security-incident-response/perform-manual-sighting-search-ms-defender-endpoint.html?contentId=4tXjMgwHt3pFgLtyS9fJOQ) - [Perform automatic observable enrichment](https://www.servicenow.com/docs/r/security-management/security-incident-response/observable-enrichment-ms-defender-endpoint.html?contentId=dViHY294mu9scFSru8Tw~w) - [Perform manual observable enrichment](https://www.servicenow.com/docs/r/security-management/security-incident-response/perform-manual-observable-enrichment-ms-defender-endpoint.html?contentId=1csNe__zOQEKgkfgTnb4rg) - [Create indicators](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-indicators-ms-defender-endpoint.html?contentId=VWqEaIr~tNW978vWE6QPxw) - [Update indicators](https://www.servicenow.com/docs/r/security-management/security-incident-response/update-indicator-in-microsoft-defender-for-endpoint-using-the-microsoft-defender-indicator-form-view.html?contentId=syWqn4P24quciWH8vckrFw) - [Domain separation](https://www.servicenow.com/docs/r/security-management/security-incident-response/domain-separation-in-ms-defender-endpoint-integration.html?contentId=L1CZ~RCcnfKkMehygn9RqQ) - [Configure rate limit](https://www.servicenow.com/docs/r/security-management/security-incident-response/rate-limit-configuration-ms-defender-endpoint.html?contentId=yz5AO8~XrucGxYFW1rQ22Q) - [Microsoft Defender integration for Security Operations](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-defender.html?contentId=9WFAF8x5HjrJogJMXOgoUw) - [Install and Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-ms-defender.html?contentId=exFQo04HlXNauX3okmvWjw) - [Create an incident profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-defender-profile.html?contentId=zLAjtXvdgIMphmnRD9~QFA) - [Map incident fields](https://www.servicenow.com/docs/r/security-management/security-incident-response/microsoft-defender-mapping.html?contentId=df4p2SG4Jm3D13yYGcnRpg) - [Define filter and aggregation criteria](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-def-filtering-and-aggregation.html?contentId=B48mN8vZdoKEjmBLaHtDfg) - [Schedule incident retrieval](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-defender-schedule-inc.html?contentId=uDZd0FMzpXaEGOn8tIZ_5A) - [Automate incident updates and closures](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-defender-additional-op.html?contentId=__vkbtkIZLy9NhpmYR2MFw) - [Microsoft Exchange Online integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-exchange-online-lookups.html?contentId=S0CRw5uPRpwEMHp9Pj8ZQg) - [Set up account](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-azure-account.html?contentId=F54RdI34Yx_Y6yui3l__Sw) - [Install](https://www.servicenow.com/docs/r/security-management/security-incident-response/install-and-configure-ms-exchange-online.html?contentId=1POnxASo9u3Iy0_qgYOdIw) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/msx_configure.html?contentId=3B6t0Iai9AF_a16ZNUmUsQ) - [Define search criteria](https://www.servicenow.com/docs/r/security-management/security-incident-response/verify-expected-results-ms-exchange-online.html?contentId=U95Sa0MgzVcQ~6q8DIBFdA) - [Request delete email approval](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-delete-email.html?contentId=oR0TDqmL7jNiPT2Ih1MVzg) - [Approve delete email requests](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-approve-delete.html?contentId=zuckiorNuqjVhz1H7fi00g) - [Recover deleted emails](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-recover-deleted-emails.html?contentId=7qGStntYtshXg7u6v4u9Ig) - [Edit security tags](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-edit-tags.html?contentId=2dcvMTR91SbXscBT2HVeSw) - [Microsoft Exchange On-Premises integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-exch-on-prem-landing-page.html?contentId=K7Puagn3~5ikkW95oit3ag) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/activate-configure-ms-exch-on-prem-integ.html?contentId=1cC3CO1kkQy6wOPWL1_BZw) - [Email Search and Deletion flow](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-exch-perform-email-search-deletion-wf.html?contentId=2KnERy93XFcKvvXDDQb_xQ) - [Microsoft Graph Security API alert ingestion integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-graph-about.html?contentId=ZLJ3AhcvvGZvV9~91xT23A) - [Set up instance](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-graph-setup-sn.html?contentId=uzwVzLekznlJL67TTwYpWA) - [Configure the Microsoft Azure portal](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-graph-configure-azure.html?contentId=VcU3BQ52pgVj60IOF62pjw) - [Install and configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-graph-install.html?contentId=GWaAEQymlLbSwAeoTHqzRA) - [Create a profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-graph-create-profile.html?contentId=Y9gQTR7DPmTVMds45QQMKQ) - [Identify source for the profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-graph-create-profile-name.html?contentId=CmTDh0gjD9V9NZTWB6NbQQ) - [Map alert fields](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-graph-mapping-about.html?contentId=08spbkx8vc2l_sFrFQ_Ceg) - [Ingest sample Microsoft Graph Security API alerts](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-graph-create-profile-ingestion.html?contentId=LA7ra~5GZ~8MVa2uU9H2gA) - [Mapping alerts to security incident response fields](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-graph-create-profile-map.html?contentId=XOrcy1r3VvXTsbIFMFlHQQ) - [Preview incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-graph-create-profile-preview.html?contentId=StiMsJnF6RHlhH8heDo1qQ) - [Define schedule](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-graph-create-profile-schedule.html?contentId=Vo99ezdtoJAGhsKd64~3Dg) - [Automate alert updates](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-graph-create-profile-automate.html?contentId=b_2VHkG2KDiadyGSR513fw) - [Modify system properties](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-graph-intg-settings.html?contentId=PZodIqVxuX2im8BjLq3Oag) - [Worknotes](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-graph-sir-changes.html?contentId=w8h6thZae0E5BzVpEWUJPA) - [Copy profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-graph-copy-profile.html?contentId=gVqcaFHBCN3PEEqnO0Ev7g) - [Domain separation](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-graph-domain-sep.html?contentId=dWJp2B1YqdB1WFtbDk2FtQ) - [Troubleshoot](https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-graph-trouble.html?contentId=o3jNDfbWrIaFEUwbigKttA) - [Palo Alto Networks - AutoFocus integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/palo-alto-autofocus-landing-page.html?contentId=swUYUjrWWzE6zf7EVQQgAQ) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/set-up-autofocus.html?contentId=DcSOzuzffrBHZsihJxI8iQ) - [Get AutoFocus Session Info Enrichment Flow](https://www.servicenow.com/docs/r/security-management/security-incident-response/search-for-malicious-content.html?contentId=qwvkYXTi5DiIpteQEHQXww) - [Palo Alto Networks - Firewall integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/palo-alto-firewall-landing-page.html?contentId=U_MYREdK8_EjFKYW3UV6ng) - [Set up SSH credentials](https://www.servicenow.com/docs/r/security-management/security-incident-response/set-up-and-config-MID-server.html?contentId=MPyqnx1AX9Fs2VyQ56sH7A) - [Activate and configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/activate-config-firewall.html?contentId=46_5S6tLB7Cpe4wcNNCz4A) - [Palo Alto Networks Firewall Launcher Workflow](https://www.servicenow.com/docs/r/security-management/security-incident-response/secops-integration-paloalto-firewall-launcher-workflow.html?contentId=vzTmL0Jxgwbql49qw3xdDA) - [Get Log Data Flow](https://www.servicenow.com/docs/r/security-management/security-incident-response/get-threat-log-data.html?contentId=s4HQfmDcJ7VMqaajjSH9lA) - [Palo Alto Networks - WildFire integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/palo-alto-wildfire-landing-page.html?contentId=1pdaqGhwYJHFNCpu8DRYiQ) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/activate-secops-palo-alto-network.html?contentId=4Z9aCd~rYklNV~DpBs06Kw) - [Get WildFire Data Enrichment Flow](https://www.servicenow.com/docs/r/security-management/security-incident-response/enrich-wildfire-data.html?contentId=~BK05z~95dhZsT8~r9Bm0Q) - [Palo Alto Networks Next-Generation Firewall integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/paloalto_integration.html?contentId=G~aTOMOJeqTT0nm4kGf74Q) - [Create a certificate profile for the Palo Alto Networks Next-Generation Firewall](https://www.servicenow.com/docs/r/security-management/security-incident-response/paloalto-create-cert-profile.html?contentId=UJAC3AtgabSNjIiZ3ltypg) - [Set up and install Palo Alto Networks Next-Generation Firewall](https://www.servicenow.com/docs/r/security-management/security-incident-response/paloalto_install.html?contentId=nV7CaQBfJdCzmHM8l0pQUg) - [Create the API account role for Palo Alto Networks Next-Generation Firewall](https://www.servicenow.com/docs/r/security-management/security-incident-response/paloalto-create-snrole.html?contentId=e7sNed36A5hrxmRVKPjNqQ) - [Supported External Dynamic Lists for Palo Alto Networks Next-Generation Firewall](https://www.servicenow.com/docs/r/security-management/security-incident-response/paloalto_supported_edls.html?contentId=DwMi9qTPXmzdc3QZoL5yBg) - [Create an EDL](https://www.servicenow.com/docs/r/security-management/security-incident-response/palo_alto_config_edl.html?contentId=r9EyEjOsnBW~LmZunUq9ew) - [Activate an EDL for Palo Alto Networks Next-Generation Firewall](https://www.servicenow.com/docs/r/security-management/security-incident-response/paloalto-activate-edl.html?contentId=c3gpL0u7yRGEaEPPGO9JHw) - [Activate an EDL manually](https://www.servicenow.com/docs/r/security-management/security-incident-response/paloalto_activate_edl_manually.html?contentId=6dO2UKj7Z80RGds~iKC6zQ) - [Configure an EDL](https://www.servicenow.com/docs/r/security-management/security-incident-response/paloalto-config_firewall_pa.html?contentId=XTF9PE_gt53w1qBO1h5TUw) - [Activate EDL with a change request](https://www.servicenow.com/docs/r/security-management/security-incident-response/paloalto_sncr_edl.html?contentId=6vPGfRs~i7dLQhRlTxz8EQ) - [Submit EDL entries from a security incident record for Palo Alto Networks Next-Generation Firewall](https://www.servicenow.com/docs/r/security-management/security-incident-response/paloalto-submit-edl-snsi.html?contentId=hlBeSnzcU9hBMi1ydjYXoQ) - [Submit EDL entries from the blocklist for Palo Alto Networks Next-Generation Firewall](https://www.servicenow.com/docs/r/security-management/security-incident-response/paloalto-submit-entry-fm-blklist.html?contentId=F6pNUGFcKcoFZX6sMJlgMg) - [Approve EDL entries for Palo Alto Networks Next-Generation Firewall](https://www.servicenow.com/docs/r/security-management/security-incident-response/paloalto-apprv-edl-entries-sncr.html?contentId=viMug2iXUMqsjCyz8KbODA) - [EDL entry exceptions for Palo Alto Networks Next-Generation Firewall](https://www.servicenow.com/docs/r/security-management/security-incident-response/paloalto-edl-execptions.html?contentId=HE8di_cLAXaQ5aXZdRpmkg) - [(Optional) Edit the security tag name for Palo Alto Networks Next-Generation Firewall](https://www.servicenow.com/docs/r/security-management/security-incident-response/paloalto_edit_sectag_name.html?contentId=Jq77MHonVRHOumf5fJMYOg) - [Uninstall](https://www.servicenow.com/docs/r/security-management/security-incident-response/paloalto-unistall.html?contentId=8Fo4rPscbOBeRX_LRRy7Jg) - [PhishTank integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/phishtank-lookups.html?contentId=fxQVpLLvN_Pn0cXenHbiXA) - [Install and configure PhishTank](https://www.servicenow.com/docs/r/security-management/security-incident-response/install-and-configure-phishtank.html?contentId=BQzONMPA04ZgTXKPlG7~UQ) - [Verify expected results for PhishTank](https://www.servicenow.com/docs/r/security-management/security-incident-response/verify-expected-results-phishtank.html?contentId=o~fZG6H~4B6qIu4ggO1_qg) - [(Optional) Manually attach an observable for PhishTank](https://www.servicenow.com/docs/r/security-management/security-incident-response/attach-an-observable-manually-phishtank.html?contentId=pbAUfUImE5Qfpjz8D_zdHw) - [Proofpoint Integration for Security Operations](https://www.servicenow.com/docs/r/security-management/security-incident-response/proofpoint-integration-secops-landing.html?contentId=fF2PjO6XiAcYppGOtl~e8w) - [Explore](https://www.servicenow.com/docs/r/security-management/security-incident-response/proofpoint-integration-secops-exploring.html?contentId=n39ox0GRQ0Jomuvw6s8I_w) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/proofpoint-integration-secops-configuring.html?contentId=shFBNO27RDOOQHHb7~ZqyA) - [Install and configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/proofppoint-integration-secops-install.html?contentId=uZ5pW7WXQde8QQiqsg2E6Q) - [Create a profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/proofpoint-integration-secops-create-profile.html?contentId=OCVvFDEl7L8lmtcsIbvlMA) - [Review Proofpoint integration settings](https://www.servicenow.com/docs/r/security-management/security-incident-response/review-proofpoint-integration-setting-sir.html?contentId=FG2ZwcPRsH_ZiMH_h_t0lw) - [View the Proofpoint Analytics Dashboard](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-proofpoint-dashboard.html?contentId=~fiKwVzCsmf6_8AinDm8cQ) - [Reverse Whois integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/reversewhois-lookups.html?contentId=eOF0OCQGjqFM7CcNztDlwQ) - [Install and configure Reverse Whois](https://www.servicenow.com/docs/r/security-management/security-incident-response/install-and-config-reversewhois.html?contentId=1AtwMWqoX8NuhigioIthGA) - [(Optional) Install and configure Whois](https://www.servicenow.com/docs/r/security-management/security-incident-response/whois-install-and-config.html?contentId=fnEhYk6m20_oI0oCc1bUtA) - [Initiate the lookup for Reverse Whois](https://www.servicenow.com/docs/r/security-management/security-incident-response/manually-attch-an-obsvrble-reversewhois.html?contentId=FA4C_Rj8_hULFaIdVCtHAg) - [Verify expected results for Reverse Whois](https://www.servicenow.com/docs/r/security-management/security-incident-response/verify-expected-rslts-rvrsewhois.html?contentId=5R0xIOD7T4uQDHUE5ckyIg) - [Enrichment lookup](https://www.servicenow.com/docs/r/security-management/security-incident-response/verify-expected-results-for-whois.html?contentId=u97U8621OQgrD3_M_vS88A) - [RISKIQ and WHOISIQ integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/riskiq-lookups.html?contentId=fYUVOF6MkXLdumLxgYRguw) - [Supported observables for RISKIQ and RISKIQ WHOISIQ](https://www.servicenow.com/docs/r/security-management/security-incident-response/riskiq_supported_obsv.html?contentId=46UlJV0Mju9G9jXgT_Mpwg) - [Install and configure RISKIQ and WHOISIQ](https://www.servicenow.com/docs/r/security-management/security-incident-response/install-and-config-riskiq.html?contentId=VTUk2WUlocDrzmqEG2Uv6A) - [Verify expected results for RISKIQ SSL certificate lookups](https://www.servicenow.com/docs/r/security-management/security-incident-response/verify-expected-rslts-for-riskiq.html?contentId=MJlHPxZouogVSnZ2wRo8mA) - [SSL Certificate Lookup: Exact Match found](https://www.servicenow.com/docs/r/security-management/security-incident-response/riskiq_ssl_exact_match.html?contentId=uW~wnvpcI6AD50kGPthI4Q) - [SSL Certificate Lookup: Multiple/None found](https://www.servicenow.com/docs/r/security-management/security-incident-response/riskiq_ssl_no_match.html?contentId=AgHELuY8PehwC6Eqqzy_8A) - [Verify expected results for WHOISIQ URL lookups](https://www.servicenow.com/docs/r/security-management/security-incident-response/verify-expctd-rslts-url-lookups-riskiq.html?contentId=Fn_Zk0ibfD55TWonL3Uy2A) - [Create an observable for manual WHOISIQ lookups](https://www.servicenow.com/docs/r/security-management/security-incident-response/manually-attch-obsv-whoisiq.html?contentId=kmZGV3~d4C7wsME80a3itg) - [Verify expected results for manual WHOISIQ lookups](https://www.servicenow.com/docs/r/security-management/security-incident-response/verify-expected-rslts-whoisiq.html?contentId=16w44vPpsWD6JynVtBrMEw) - [Shodan integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/shodan-lookups.html?contentId=XQ8zXmqo2Ciup0vUMwjRCg) - [Install and configure Shodan](https://www.servicenow.com/docs/r/security-management/security-incident-response/install-and-configure-shodan.html?contentId=dw_foz4iOY~OJTBXct51UQ) - [Verify expected results for Shodan](https://www.servicenow.com/docs/r/security-management/security-incident-response/shodan-verify-expected-results.html?contentId=GM05y5GVzvQ9nKgBwsBlvQ) - [(Optional) Manually attach an observable for Shodan](https://www.servicenow.com/docs/r/security-management/security-incident-response/manually-attach-an-observable-shodan.html?contentId=oKNPS0H36pDcIgNlnlQNyQ) - [Secureworks CTP Ticket Ingestion Integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/secureworks-ctp-about.html?contentId=o~OpRAO40ZalmTzOGJkvGg) - [Setup instance](https://www.servicenow.com/docs/r/security-management/security-incident-response/secureworks-ctp-setup.html?contentId=BOJOUOvBN61qDyTQZYqiuQ) - [Install and configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/secureworks-ctp-install-configure.html?contentId=ZzhQee_4srFLWf4_Nhl9SA) - [Create a profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/secureworks-ctp-create-profile.html?contentId=j79mTJvzZqD3KiaOIwv_Eg) - [Identify the source of the profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/secureworks-ctp-create-profile-name.html?contentId=L7iVg9vhoGJ_Nia_pNWE_Q) - [Mapping of ticket fields for the SecureWorks CTP integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/secureworks-ctp-create-profile-about-mapping.html?contentId=DMuA6eymcrzeHXxI7GNOvA) - [Ingesting the sample Secureworks tickets](https://www.servicenow.com/docs/r/security-management/security-incident-response/secureworks-ctp-create-profile-ingestion.html?contentId=FZpp1ZMJReFywHJhO7elnQ) - [Mapping](https://www.servicenow.com/docs/r/security-management/security-incident-response/secureworks-ctp-create-profile-mapping.html?contentId=0fvedT6_6ZeVwOWwDHURpQ) - [Preview the mapped values in the security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/secureworks-ctp-create-profile-preview.html?contentId=I_gWQfUxO4zKTxGdaEmKaA) - [Define schedule for the Secureworks CTP Ticket ingestion](https://www.servicenow.com/docs/r/security-management/security-incident-response/secureworks-ctp-create-profile-schedule.html?contentId=jLF6O3h0DJ_0eZn31h42kQ) - [Automate ticket updates](https://www.servicenow.com/docs/r/security-management/security-incident-response/secureworks-ctp-create-profile-additional.html?contentId=7_MEo~hkuO191zgJmqwnsw) - [Optional: Copy a Secureworks CTP profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/secureworks-ctp-copy-profile.html?contentId=qCEhSct_dmVETWtLSQECfQ) - [Post ingestion form updates](https://www.servicenow.com/docs/r/security-management/security-incident-response/secureworks-ctp-sir-changes.html?contentId=bvNvyPEDg8ZS9hxcyazoEA) - [View Secureworks ticket](https://www.servicenow.com/docs/r/security-management/security-incident-response/secureworks-ctp-view-tickets.html?contentId=ZrkM1Z4R6BCYOTLz2mTZgA) - [Secureworks CTP Master Ticket Closure Notice](https://www.servicenow.com/docs/r/security-management/security-incident-response/secureworks-ctp-master-ticket-closure.html?contentId=Rfp8iJJs3LFSuHE6o1Wt_w) - [Configuration settings](https://www.servicenow.com/docs/r/security-management/security-incident-response/secureworks-ctp-integration-settings.html?contentId=s8FZ~s0Q_d_bZ_2DRvr3Hw) - [Security Incident Response Integration with Cortex XSIAM by Palo Alto Networks](https://www.servicenow.com/docs/r/security-management/security-incident-response/cortex-xsiam-siem.html?contentId=eaQD6cVCATEN6U3NbPWmAg) - [Install and Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-cortex-xsiam-siem.html?contentId=zaug4L8HoWAHxcK~fsKgyw) - [Create an incident profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/pan-cortex-xsiam-profile.html?contentId=wZIH1T1Oo_atjjDEPV3UJg) - [Set Alert Sources](https://www.servicenow.com/docs/r/security-management/security-incident-response/pan-cortex-xsiam-rules.html?contentId=jIXMjhmqngQOTh1On1AqkA) - [Map incident fields](https://www.servicenow.com/docs/r/security-management/security-incident-response/pan-cortex-xsiam-mapping.html?contentId=0dX_OWipCbJjyEx5xTxCeQ) - [Define filter and aggregation criteria](https://www.servicenow.com/docs/r/security-management/security-incident-response/xsiam-filtering-and-aggregation.html?contentId=3hrH9l3M7B~ir9Msx7Lg4g) - [Schedule incident retrieval](https://www.servicenow.com/docs/r/security-management/security-incident-response/pan-xsiam-schedule-inc-retrieval.html?contentId=4tORavVrM91BpVI~et5Mfg) - [Automate incident updates and closures](https://www.servicenow.com/docs/r/security-management/security-incident-response/pan-xsiam-automate-inc-updates.html?contentId=qsR_1HEn4ZrVscTtqcwxCg) - [Security Incident Response integration with Zscaler](https://www.servicenow.com/docs/r/security-management/security-incident-response/zscaler-integration-for-security-operations.html?contentId=OqFl5t3qYA6hRXWGbke4Ww) - [Get started](https://www.servicenow.com/docs/r/security-management/security-incident-response/get-started-with-zscaler.html?contentId=FP3uhfPgb5cmbxcrmrpWuA) - [Configure access to APIs](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-zscaler-api-access.html?contentId=0M81DOA9VZ3o3AHqphEk6A) - [Configure integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/install-zscaler-integration-for-security-operations.html?contentId=nb~hBuu0GRnsaju3_QE8iQ) - [Add Zscaler Internet Access URL category lists](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-zscaler-internet-access-url-category-manually.html?contentId=0igrjiTCVHXci6RrVyUfeA) - [Submit observables](https://www.servicenow.com/docs/r/security-management/security-incident-response/submit-entries-from-a-security-incident-record-for-url-category-list.html?contentId=FgvoLMvjlBylsyqaVgdHSw) - [Approve observables to URL category lists](https://www.servicenow.com/docs/r/security-management/security-incident-response/approve-url-category-list.html?contentId=K0YklmNgkm9GJ16YE61~vA) - [Submit the security incident to the Zscaler URL category list](https://www.servicenow.com/docs/r/security-management/security-incident-response/manually-submit-the-security-incident-to-the-zscaler-url-category-list.html?contentId=nMPGPMPWygPtK83TwJGF4w) - [Run threat lookup](https://www.servicenow.com/docs/r/security-management/security-incident-response/run-threat-lookup-using-zscaler-global-threat-library.html?contentId=T4MZlYj1~qBys4JAuPYyOg) - [Submit to Zscaler Sandbox analysis](https://www.servicenow.com/docs/r/security-management/security-incident-response/submit-to-zscaler-sandbox-analysis.html?contentId=bhocw~sApTDIoQ0Bl7Bj2A) - [Set up email alerts for Patient 0 events](https://www.servicenow.com/docs/r/security-management/security-incident-response/setup-up-email-for-patient-zero-alerts.html?contentId=mJPIIGOwEUA~kxZ7tbsSvA) - [ServiceNow Security Operations add-on for Splunk overview](https://www.servicenow.com/docs/r/security-management/security-incident-response/secops-integration-with-splunk.html?contentId=kPK7Zw5ZQYj9ejXohk5FKQ) - [Setup Splunk environment](https://www.servicenow.com/docs/r/security-management/security-incident-response/setup-chg-instance.html?contentId=mnG2RHfxm8oUSyVwzSDRoA) - [Configure Application Registry](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-application-registry-splunk.html?contentId=eHaCi5EufhkndktbCn7hmA) - [Using Splunk add-on](https://www.servicenow.com/docs/r/security-management/security-incident-response/using-sn-secops-int-addon.html?contentId=2h9ubEq_xyPrMgdRPtqqYQ) - [Manual search commands](https://www.servicenow.com/docs/r/security-management/security-incident-response/manual-search-commands.html?contentId=cbUPjlU5bCdwDu2NhAYJmg) - [Splunk event actions](https://www.servicenow.com/docs/r/security-management/security-incident-response/event-actions.html?contentId=4kSL_1hhQN~oFmHD0fnCGg) - [Single-record Splunk alerts](https://www.servicenow.com/docs/r/security-management/security-incident-response/alerts.html?contentId=uljSwKoyBFLrHq8MrscuTQ) - [Multiple-record, custom field Splunk alerts](https://www.servicenow.com/docs/r/security-management/security-incident-response/multiple-record-splunk-alerts.html?contentId=Vbh_DSlw_qcuNUN9eNvgpg) - [Create a multi-record, custom field Splunk alert](https://www.servicenow.com/docs/r/security-management/security-incident-response/create-multi-record-alert.html?contentId=6JSLOAFh2GDP4vWW9djItg) - [Multi-record, custom field Splunk alert examples](https://www.servicenow.com/docs/r/security-management/security-incident-response/multi-record-examples.html?contentId=igsYV6NjKlSpbPY_ykC1Ow) - [Splunk error reporting](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-error-rpting.html?contentId=WCtF6uXqKk3E0zgrjR1Psg) - [Splunk Enterprise Event Ingestion integration for Security Operations by ServiceNow](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-overview.html?contentId=s62euW6wuTF9XqEFeB34Dw) - [Set up](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-setup-sn.html?contentId=p308quYGq4lPn28RCuaVJw) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-install-and-configure.html?contentId=czeapwmg6ZO9i14gQfNysA) - [Configure settings](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-splunk-enterprise-event-ingestion-settings.html?contentId=lVTmNFjotz6VXi2ORBg9JQ) - [Create an event profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-create-profile.html?contentId=7NFCqf1YmNs~YCIYDXvhpA) - [Select scheduled alerts](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-alert-selection.html?contentId=OyRnB6BgP7npHub0X6wBLw) - [Map event fields](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-mapping.html?contentId=cGi47QXiNEKCpOTp4x3vWQ) - [Map alerts](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-map-alerts.html?contentId=Hm7NfdHHMlV7aWWkwIBJBg) - [Preview security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-preview.html?contentId=GLKYfj0FHHw8zOqxD1LkOg) - [Schedule and retrieve alerts](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-schedule.html?contentId=xeIQ~Zo5W71b2nU_kRhaPA) - [Integration architecture and external systems connection](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-integration-architecture.html?contentId=piJoVPGTs8KiW~_fUBcQSA) - [Copy Splunk profiles](https://www.servicenow.com/docs/r/security-management/security-incident-response/export-and-import-splunk-event-profile-data.html?contentId=D_xvtMh5eFZPaQWVKDLEtg) - [Copy an event profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-copy-a-profile.html?contentId=s_yAGJrTald6u~sD15jruA) - [Set up Splunk environment](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-setup-prereqs.html?contentId=0egPbcmEK7DLxwDzldsdNQ) - [Use Splunk add-on](https://www.servicenow.com/docs/r/security-management/security-incident-response/use-v2-addon.html?contentId=Bb6wSFVZbjWy26~Hnf1bNw) - [Save search in console](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest_save_search.html?contentId=wFfdQU7nfD1etaRuxPmY1w) - [Format alert values](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest_script_editor.html?contentId=ltMm39D~lTYgdhN_Ftf5vw) - [Checklist](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest_checklist.html?contentId=tpZmfJ9Zdnt7AsDqcpBL4Q) - [Splunk Enterprise Security event ingestion integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-overview-security.html?contentId=iFNvmSp7GHCCogUY9sn14A) - [Glossary](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-integration-architecture-security.html?contentId=CPpv9nPyK6El4BLrjAwTaQ) - [Set up instance](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-setup-sn-security.html?contentId=KJDhPmiV6VMbAG1EahUuSQ) - [Install and configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-install-and-configure-security.html?contentId=h8cXHhPHDhuqPVa1F7RICw) - [Security settings](https://www.servicenow.com/docs/r/security-management/security-incident-response/configure-splunk-enterprise-security-settings.html?contentId=cOnNnb4lldDs4EcECbA1kQ) - [Authentication errors](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunkes-auth-errors-security.html?contentId=VtkrK9e7tSQ075ixoeSNDg) - [Create an event profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-create-profile-security.html?contentId=w2Q2FzWAjlTcoZuDIbGggw) - [Set up a profile for scheduled notable event ingestion](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-scheduled-security.html?contentId=IV1ocCu9sv0EyuYjTaTlWA) - [Create a profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-create-profile-sched-security.html?contentId=cjbJZK59YABU9tumtfkRaQ) - [Set Correlation rules](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-alert-selection-security.html?contentId=2GTAl4dzRjrL7JlKaa5mGw) - [Explore Mapping](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest_mapping-security.html?contentId=C2L5K8xWLPGt_GbSBrkpOw) - [Map notable events](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-map-alerts-security.html?contentId=fMQdPkKCiKT33utpLsCeBQ) - [Preview security incident](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-preview-security.html?contentId=HStD5LtOK25wT4qQTMHILQ) - [Schedule and retrieve notable events](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-schedule-security.html?contentId=kpSaNA508O9cDIqK5gN~Zg) - [Automate notable event updates](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-additional-security.html?contentId=0shA7rTniZQx8kj_m7EIjw) - [Set up a profile for manual event forwarding](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-manual-security.html?contentId=0YmNDkHbO~LboBFwAa733A) - [Create a profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-create-profile-manual-security.html?contentId=63nUsGQp1rw0lwOTzLxhyQ) - [Map notable event fields](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-map-manual-security.html?contentId=aWt_uCD3e8mF7G3XEpWpeQ) - [Set up Splunk environment](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-es-addon.html?contentId=LPrHFDH57~EMRgyWNkQAqA) - [Forward events on-demand](https://www.servicenow.com/docs/r/security-management/security-incident-response/use-event-ingestion-addon.html?contentId=7V87LLvs5z1ttZ0ukoPRXw) - [Copy an event profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-copy-a-profile-security.html?contentId=6RX06qmRP_FoOl4ya0DCMg) - [Format alert values](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest_script_editor-security.html?contentId=uegFTdvdLSkX8gNFQW5mRQ) - [Copy a Splunk ES profile](https://www.servicenow.com/docs/r/security-management/security-incident-response/import-and-export-splunk-profile-data.html?contentId=Fwfoql2vnMps5FX_D1rlkg) - [Checklist](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-event-ingest-checklist-security.html?contentId=eUGO5_vw_lrz9gt04IAdTA) - [Splunk - Incident Enrichment integration](https://www.servicenow.com/docs/r/security-management/security-incident-response/splunk-in-enrich-landing-page.html?contentId=TQC5VV8Lxuxk33SClZQmPg) - [Configure](https://www.servicenow.com/docs/r/security-management/security-incident-response/activate-configure-splunk-inc-enric.html?contentId=mnXWPGzi_vPjtlmfWt4B6A) - [SIR Integration References](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-integration-references.html?contentId=NlmQuu8rpZWHhOp5MYDGdA) - [Allow and Block Request List Entries](https://www.servicenow.com/docs/r/security-management/security-incident-response/allow-and-block-list-properties.html?contentId=K3Lz~BTuN8USpgrwFC7aqg) - [CrowdStrike Block Request Category List](https://www.servicenow.com/docs/r/security-management/security-incident-response/block-req-category-list.html?contentId=1N4De0Mxmeya9DO1lZa2Gw) - [Mobile Experience for Security Incident Response](https://www.servicenow.com/docs/r/security-management/security-incident-response/mobile-sir.html?contentId=CpDlyYMOjt55pBTppXuQSQ) - [Set up checklist](https://www.servicenow.com/docs/r/security-management/security-incident-response/mobile-sir-setupinstll-mobile-app.html?contentId=xtia7nf1dqwaWP_12hxZOA) - [Log in to the Security Incident Response Mobile app](https://www.servicenow.com/docs/r/security-management/security-incident-response/mobile-sir-get-started.html?contentId=aDZcaV3hMwgt6IiDez4pdA) - [View, edit, and assign open security incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/mobile-sir-open-incidents.html?contentId=~8UQb49OcQ0J8KUXAFyISg) - [View, edit, and reassign security incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/mobile-sir-my-incidents.html?contentId=dbK43Z04YruobIl4MQ6BmQ) - [Update and assign unassigned security incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/mobile-sir-unassigned-incdts.html?contentId=hsqFs_WvuOttVtbHb6TZPw) - [View, edit, and assign high priority incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/mobile-sir-high-priority-incndts.html?contentId=cKvE~ZmUBqHS7SGQzk3_8g) - [Update high-risk security incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/mobile-sir-risk-score.html?contentId=SNqpGUevHpiR0W_hWbxhKQ) - [Search security incidents](https://www.servicenow.com/docs/r/security-management/security-incident-response/mobile-sir-search.html?contentId=E0tZ9jARRE66eIEDCXF7vw) - [View, edit, and assign open response tasks](https://www.servicenow.com/docs/r/security-management/security-incident-response/mobile-sir-response-tsks.html?contentId=y2MJHRnwVDNeDzrlie3uZQ) - [View, edit, and reassign response tasks](https://www.servicenow.com/docs/r/security-management/security-incident-response/mobile-sir-my-response-tsks.html?contentId=Q5fl8He2BFAQ2uyBBtOvxA) - [Filter records](https://www.servicenow.com/docs/r/security-management/security-incident-response/mobile-sire-filters.html?contentId=qZaWNCfIclvSAWGk5jX2_A) - [Security Incident Response Orchestration](https://www.servicenow.com/docs/r/security-management/security-incident-response/c_SecIncRespOrchestration.html?contentId=8R6H~r8uUdvrO6UwGqtHhw) - [Set up Security Incident Response Orchestration](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_SecInRespOrchSetup.html?contentId=laQXtIQjjeJ4BO~eiRnP~Q) - [Understand Security Incident Response Orchestration workflows and workflow templates](https://www.servicenow.com/docs/r/security-management/security-incident-response/view-wf-templates.html?contentId=ecyAlDsE_z2EuiqOZ5~X~w) - [Security Incident Response Orchestration workflows and activities](https://www.servicenow.com/docs/r/security-management/security-incident-response/sec-inc-resp-orchestration-workflows.html?contentId=GDv1sIu3FAGnb2Lk2921lA) - [Create Lookup Request for IoC Changes workflow](https://www.servicenow.com/docs/r/security-management/security-incident-response/t_CreateScanRequestforIoCChanges.html?contentId=5OxAVQ05un7iMQGLySi_kg) - [Create IoC Lookup Request activity](https://www.servicenow.com/docs/r/security-management/security-incident-response/r_CreateMalwareScanRequest.html?contentId=XC1VOAoAOjmk_9bipX6lMg) - [Get Network Statistics flow](https://www.servicenow.com/docs/r/security-management/security-incident-response/obtain-network-statistics-workflow.html?contentId=Wi5oAFR5hEh1TDjn4pCeqA) - [Get Running Services workflow](https://www.servicenow.com/docs/r/security-management/security-incident-response/get-running-services-workflow.html?contentId=ULSrAZ4PL8fhAPQQUjIrsQ) - [Determine Shell Script by OS activity](https://www.servicenow.com/docs/r/security-management/security-incident-response/determine-shell-script-by-os-activity.html?contentId=eYgFOIbVFmoTt~OOxUVzGw) - [Get Running Services - WMI Enrichment](https://www.servicenow.com/docs/r/security-management/security-incident-response/get-running-services-via-pwrshell-activity.html?contentId=s~AwLXdkQS6giI1W0s1W1w) - [Run procdump flow](https://www.servicenow.com/docs/r/security-management/security-incident-response/invoke_procdump.html?contentId=bXeIFHnWymsg5wcdZfVZcQ) - [Execute procdump action](https://www.servicenow.com/docs/r/security-management/security-incident-response/execute_procdump.html?contentId=KJBTdBn9pZWzo5up6_oLpg) - [Security Incident - Evaluate response task outcome workflow](https://www.servicenow.com/docs/r/security-management/security-incident-response/si-evaluate-response-task-outcome-workflow.html?contentId=maTUd1HVZsJOz8E4AsCRHQ) - [Security Incident Response workflow templates](https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-orch-workflow-templates.html?contentId=GyUjHam7YofTECgwlfXqVQ) - [Security Incident Confidential Data Exposure workflow template](https://www.servicenow.com/docs/r/security-management/security-incident-response/si-confidential-data-exposure-template.html?contentId=fTuAIyqyUjasy_P6KTva8w) - [Security Incident Denial of Service workflow template](https://www.servicenow.com/docs/r/security-management/security-incident-response/si-denial-of-service-template.html?contentId=nAWMm9uckbOiCOr5IBDRiw) - [Security Incident Lost Equipment workflow template](https://www.servicenow.com/docs/r/security-management/security-incident-response/si-lost-equip-template.html?contentId=KpM8CoOt~rrXv7gKl~P8xA) - [Security Incident Malicious Software workflow template](https://www.servicenow.com/docs/r/security-management/security-incident-response/si-malic-sftwr-template.html?contentId=0rqd64yW4jc7g0uYqjptgQ) - [Security Incident Phishing workflow template](https://www.servicenow.com/docs/r/security-management/security-incident-response/si-phishing-template.html?contentId=6r1T~9bbiDYdsjmbtE6RLg) - [Security Incident Policy Violation workflow template](https://www.servicenow.com/docs/r/security-management/security-incident-response/si-policy-violation-template.html?contentId=_1RSVKeo9BGk3l__Du4dew) - [Security Incident Reconnaissance workflow template](https://www.servicenow.com/docs/r/security-management/security-incident-response/si-recon-wf-template.html?contentId=SxaKVFvBDX19Pp72~1CeBA) - [Security Incident Rogue Server or Service workflow template](https://www.servicenow.com/docs/r/security-management/security-incident-response/si-rogue-wf-template.html?contentId=99c0uEoHuDK6bMh5St8I9Q) - [Security Incident Spam workflow template](https://www.servicenow.com/docs/r/security-management/security-incident-response/si-spam-template.html?contentId=Dr~3VxgJdpViBrXLdqRyHQ) - [Security Incident Unauthorized Access workflow template](https://www.servicenow.com/docs/r/security-management/security-incident-response/si-unauth-access-wf-template.html?contentId=R794_nUsX48bPAfwkaYWEg) - [Security Incident Web/BBS Defacement workflow template](https://www.servicenow.com/docs/r/security-management/security-incident-response/si-web-defacement-template.html?contentId=6c0hNTbvjks0vvPV28MXRw) - [Threat Intelligence](https://www.servicenow.com/docs/r/security-management/threat-intel-landing-page.html?contentId=EDFxY~8rgGPzXl8FLjGdVw) - [Understanding Threat Intelligence](https://www.servicenow.com/docs/r/security-management/understanding-threat-intel.html?contentId=xOtm4CgiVGnUN~VytQPtJg) - [Domain separation and Threat Intelligence](https://www.servicenow.com/docs/r/security-management/domain-separation-threat-intelligence.html?contentId=udPDQFD2FN0Czu7AEzszAQ) - [Set up Threat Intelligence](https://www.servicenow.com/docs/r/security-management/c_GetStartedWithThreatIntel.html?contentId=4Sfzisfsu3Bz_LVvRGunhw) - [IoC Repository](https://www.servicenow.com/docs/r/security-management/ioc-repository.html?contentId=xPTrgYYLGtLEGwRPczzsNw) - [Attack modes and methods](https://www.servicenow.com/docs/r/security-management/c_AttackModeMethod.html?contentId=cyKWD_KRiLlOwd~aumWVWw) - [Define an attack mode/method](https://www.servicenow.com/docs/r/security-management/t_AddAttackModeMethod.html?contentId=bBiEc2RMnZPdjpykUMZw2A) - [Add an IoC to an attack mode/method](https://www.servicenow.com/docs/r/security-management/t_AddIoCToAttackMode.html?contentId=_iFeibZPMhL1e31cX6P64w) - [Add a related attack mode method](https://www.servicenow.com/docs/r/security-management/t_AddRelatedAttackMode.html?contentId=RfAlAi35UoomTd5tJWpdvw) - [Add associated task to an attack mode/method](https://www.servicenow.com/docs/r/security-management/t_AddAssociatedTaskToAttackMode.html?contentId=0IZH7KJgYKEULMWSmn5kMA) - [Indicators of compromise](https://www.servicenow.com/docs/r/security-management/c_IoCs.html?contentId=~_5x5C5xKp3vW7Nje1t5_g) - [View an IoC](https://www.servicenow.com/docs/r/security-management/t_AddIoCs.html?contentId=9H4RTsgsKkEE7XCPiuVOGA) - [Add a related observable to an IoC](https://www.servicenow.com/docs/r/security-management/t_AddObservToIoC.html?contentId=FcTFr~hTikasaXVVThBcmQ) - [Add a related attack mode/method to an IoC](https://www.servicenow.com/docs/r/security-management/t_AddRelatedAttackModeToIoc.html?contentId=C6KKmBDdf~qgYn3lCgh_3w) - [Identify associated indicator types](https://www.servicenow.com/docs/r/security-management/t_IdentifyAssociatedIndicatorTypes.html?contentId=_3S1Ue33Mc5uW9JVeJywjw) - [Identify indicator sources](https://www.servicenow.com/docs/r/security-management/t_IdentifyIndicatorSources.html?contentId=OBiHz5ly19_ci~saUsNCOg) - [Add associated tasks to an IoC](https://www.servicenow.com/docs/r/security-management/t_AddAssociatedTasksToIoC.html?contentId=RjEq~E66SeApV_VF3Qx4vg) - [Observables](https://www.servicenow.com/docs/r/security-management/c_Observables.html?contentId=ui04K2CeetRpiMx0P~~xtw) - [Define an observable](https://www.servicenow.com/docs/r/security-management/t_AddObservable.html?contentId=upQorgqEcQ79uTOEpSM~8g) - [Add a related IoC to an observable](https://www.servicenow.com/docs/r/security-management/t_AddIoCToObserv.html?contentId=WdS0FJDWtsc_Uouplfq8Bw) - [Add associated tasks to an observable](https://www.servicenow.com/docs/r/security-management/t_AddAssociatedTasksToObservable.html?contentId=9vaDCfuOCkH709dAkJkO4A) - [Add a related observable](https://www.servicenow.com/docs/r/security-management/t_AddRelatedObservable.html?contentId=3UJAhomfwsxFpt~hFmTmNg) - [Load more IoC data](https://www.servicenow.com/docs/r/security-management/t_LoadAdditionalIoCData.html?contentId=Rd_43MvSEiqCpgmCU8l_Zw) - [Identify observable sources](https://www.servicenow.com/docs/r/security-management/t_IdentifyObservbleSources.html?contentId=ti4kb3ABM59fbvjrib8TXQ) - [Perform lookups on observables](https://www.servicenow.com/docs/r/security-management/perform-lookups-on-observables.html?contentId=zSIXVB~4p1B6fRf_1dwhOA) - [Perform threat enrichment on observables](https://www.servicenow.com/docs/r/security-management/perform-enrich-on-observs.html?contentId=VYN2cbQrChyKC~Tdm_olPA) - [Attack patterns](https://www.servicenow.com/docs/r/security-management/attack-patterns.html?contentId=UuOSjJ2xUfBgFrw6~ZTemw) - [Define an attack pattern](https://www.servicenow.com/docs/r/security-management/define-attack-pattern.html?contentId=ljyTxNshtti0tUarHVxOrQ) - [Campaigns](https://www.servicenow.com/docs/r/security-management/threat-intelligence-campaigns.html?contentId=Nu1dUuP4nSv44COFgkZMbg) - [Define a campaign](https://www.servicenow.com/docs/r/security-management/define-campaign.html?contentId=~XxMx3zRRlwdf5I0q_e6TQ) - [Course of actions](https://www.servicenow.com/docs/r/security-management/threat-intelligence-course-actions.html?contentId=XuP_A9xH80Aqgn9MgUmM5g) - [Define a course of action](https://www.servicenow.com/docs/r/security-management/define-course-action.html?contentId=ZBU3HWywbid1ytaHAnhaxg) - [Identities](https://www.servicenow.com/docs/r/security-management/threat-intelligence-identities.html?contentId=aWofF~PUtnoQmzDytaUpxg) - [Define identities](https://www.servicenow.com/docs/r/security-management/define-identities.html?contentId=TiV~arz0lh6r3VNaQ0tooA) - [Infrastructure](https://www.servicenow.com/docs/r/security-management/threat-intelligence-infrastructure.html?contentId=MsrL9poYsfloBxpC4fdCAA) - [Define infrastructure](https://www.servicenow.com/docs/r/security-management/define-infrastructure.html?contentId=KfMdhNoFo~faOd2T9EkyOQ) - [Intrusion set](https://www.servicenow.com/docs/r/security-management/threat-intelligence-intrusion-sets.html?contentId=lFGQq8FM8geaczDKmcF2Eg) - [Define an intrusion set](https://www.servicenow.com/docs/r/security-management/define-intrusion-set.html?contentId=jCFaqgYaWNEk2Xnn79Wjfg) - [Locations](https://www.servicenow.com/docs/r/security-management/threat-intelligence-locations.html?contentId=6B6G8V8MuRLBzX4PeCEuOQ) - [Define Location](https://www.servicenow.com/docs/r/security-management/define-location.html?contentId=R1kxHD~Ys2rRtg_QCH4hqw) - [Malware](https://www.servicenow.com/docs/r/security-management/threat-intelligence-malware.html?contentId=e7po459p8HJyrF8hwXzs7g) - [Define a Malware](https://www.servicenow.com/docs/r/security-management/define-malware.html?contentId=BAVhT~mEtQ72C_dYEomptw) - [Malware analysis](https://www.servicenow.com/docs/r/security-management/threat-intelligence-malware-analysis.html?contentId=VoKjnHYug4f8~JH1mu_QNg) - [Define malware analysis](https://www.servicenow.com/docs/r/security-management/define-malware-analysis.html?contentId=iIe7mEkXI6ttspl7X9cHYA) - [Observed data](https://www.servicenow.com/docs/r/security-management/threat-intelligence-observed-data.html?contentId=jh0V4_aQlhCGUJbvtqWANA) - [Define observed data](https://www.servicenow.com/docs/r/security-management/observed-data.html?contentId=mrsrF~U8V8ECpYNhjL8EtQ) - [Threat actors](https://www.servicenow.com/docs/r/security-management/threat-actors.html?contentId=YH3L4y8RaIokEUln1lzMdA) - [Define threat actors](https://www.servicenow.com/docs/r/security-management/define-threat-actors.html?contentId=eOKryC2pWJ7Tv0ISBu2MNA) - [Threat groupings](https://www.servicenow.com/docs/r/security-management/threat-groupings.html?contentId=aZ7FBFoC6ivY53KX3IKvNA) - [Define threat groupings](https://www.servicenow.com/docs/r/security-management/define-threat-groupings.html?contentId=cveyMqsuZMkDpl5iRXb1~Q) - [Marking definitions](https://www.servicenow.com/docs/r/security-management/marking-definitions.html?contentId=ZCPNuwJpvPD9ZAYp3CwDHQ) - [Define marking definitions](https://www.servicenow.com/docs/r/security-management/define-marking-definitions.html?contentId=eNnyVTBITx21vEwfCDRxKw) - [Threat notes](https://www.servicenow.com/docs/r/security-management/threat-intelligence-threat-notes.html?contentId=VUwKCjYewyQ~fOdMH5Z8mQ) - [Define threat notes](https://www.servicenow.com/docs/r/security-management/define-threat-notes.html?contentId=ESzngqTQf8w0mmU_Ddm1aA) - [Threat opinions](https://www.servicenow.com/docs/r/security-management/threat-opinions.html?contentId=L6Gg6obYHYJKgnIl0NNV4g) - [Define threat opinions](https://www.servicenow.com/docs/r/security-management/define-threat-opinions.html?contentId=PoktotN1TPh92QKlxj0s5Q) - [Threat reports](https://www.servicenow.com/docs/r/security-management/threat-reports.html?contentId=7eeVecZEycOVAhUtm2v7WA) - [Define threat reports](https://www.servicenow.com/docs/r/security-management/define-threat-reports.html?contentId=o4zNHTnZ1RME3ESq7ruxuA) - [Sightings](https://www.servicenow.com/docs/r/security-management/indicator-sightings.html?contentId=ZyuyLN3jctJ8HO0j1dPnVw) - [Define indicator sightings](https://www.servicenow.com/docs/r/security-management/define-indicator-sightings.html?contentId=RQjaB73cEux8iBZeec8v2g) - [Define object sightings](https://www.servicenow.com/docs/r/security-management/define-object-sightings.html?contentId=Jv_nnfj6w3qsTTK6FfJaxg) - [Tools](https://www.servicenow.com/docs/r/security-management/tools.html?contentId=7AdRjMz5UbXi4hRn1NsJUQ) - [Define tools](https://www.servicenow.com/docs/r/security-management/define-tools.html?contentId=WnBvNYx~mlet9P6ZmbLUeQ) - [Vulnerabilities](https://www.servicenow.com/docs/r/security-management/vulnerabilities.html?contentId=YDrRC6CPkzVQHyWZT3Ac0w) - [Define vulnerabilities](https://www.servicenow.com/docs/r/security-management/define-vulnerabilities.html?contentId=laBhl3nKz09yKBbtVu~NBQ) - [Relationships](https://www.servicenow.com/docs/r/security-management/stix-relationships.html?contentId=wMzeprfk~jJz84E0AMMOqA) - [Define object-object relationships](https://www.servicenow.com/docs/r/security-management/define-object-object.html?contentId=lyfucgXuR7H74xWmeM4JBQ) - [Define object-indicator relationships](https://www.servicenow.com/docs/r/security-management/define-object-indicator.html?contentId=oARo1gm_c5MI_zR~NjTZqw) - [Define object-observable relationships](https://www.servicenow.com/docs/r/security-management/define-object-observable.html?contentId=70WPAO2jr7oYUFo8kLaqXQ) - [STIX Visualizer](https://www.servicenow.com/docs/r/security-management/stix-visualizer.html?contentId=Dxia~MdVLgorE5WXVGsqXg) - [MITRE-ATT&CK framework overview](https://www.servicenow.com/docs/r/security-management/about-mitre-attack.html?contentId=9B37j8A~xtItasukFMMZbA) - [MITRE-ATT&CK administration](https://www.servicenow.com/docs/r/security-management/mitre-att-ck-administration.html?contentId=IZ~Xm6pjOTWiGc165_AMLw) - [Get started with MITRE-ATT&CK framework](https://www.servicenow.com/docs/r/security-management/get-started-with-mitre.html?contentId=Mb1vK5AhH9QaN33xmFkQaw) - [Understand the MITRE to STIX data model](https://www.servicenow.com/docs/r/security-management/understand-the-mitre-to-stix-data-model-mapping.html?contentId=BN0oy9fa2fYnXH_1JXOyRA) - [Domain separation and MITRE-ATT&CK](https://www.servicenow.com/docs/r/security-management/domain-separation-and-mitre-att-ck.html?contentId=Ljl0v29s02CFX8JMhUVmZQ) - [Set up the MITRE-ATT&CK framework](https://www.servicenow.com/docs/r/security-management/setup-mitre-profile.html?contentId=aPqYDa7BVLcGb3SYQW8pdg) - [Manage matrices](https://www.servicenow.com/docs/r/security-management/view-mitre-collection.html?contentId=o8vv_DMZ1KwIAL2aRNNLoA) - [Manage techniques](https://www.servicenow.com/docs/r/security-management/view-techniques.html?contentId=GKW13NyGH0pojIIpzbwWqQ) - [Manage mitigations](https://www.servicenow.com/docs/r/security-management/manage-mitigations.html?contentId=jNffbobeO638mpSaw9hTgA) - [Manage groups](https://www.servicenow.com/docs/r/security-management/manage-groups-threat-intel.html?contentId=YOE6KJnghmGrWJhKv1LrdQ) - [Manage malware](https://www.servicenow.com/docs/r/security-management/manage-malware.html?contentId=bXXVCfKwySwZ1JrCRm0I9g) - [Manage tools](https://www.servicenow.com/docs/r/security-management/manage-tools.html?contentId=hEZDYRtUIpKHLTwGNrMNyA) - [Manage MITRE relationships](https://www.servicenow.com/docs/r/security-management/manage-mitre-relationships.html?contentId=84JmSUdrWu3c1N8_fQyi7Q) - [Manage CVE and technique mapping](https://www.servicenow.com/docs/r/security-management/manage-cve-and-technique-mapping.html?contentId=ZIyK6miqVJmIY0Kc66DEIg) - [Extend the MITRE-ATT&CK data](https://www.servicenow.com/docs/r/security-management/view-and-extend-information.html?contentId=_ndziNk43BYl18pOkxZS3Q) - [Define the data source and detection tool mapping](https://www.servicenow.com/docs/r/security-management/manage-mitre-att-ck-data-sources.html?contentId=PO0FU9wLDILiYHSCRbcApA) - [Define the data source and data component mapping](https://www.servicenow.com/docs/r/security-management/map-the-data-source-and-data-components.html?contentId=jTgU8QctXD~EEHcTnIqX9w) - [Define the technique detection coverage](https://www.servicenow.com/docs/r/security-management/define-technique-coverage.html?contentId=6VBBh53fsh_LxnQpmIc5zQ) - [MITRE-ATT&CK Scoring definition](https://www.servicenow.com/docs/r/security-management/scoring-definition.html?contentId=mfr4ESgk~8R7woXshUSA5A) - [Map your technique detection coverage to a technique](https://www.servicenow.com/docs/r/security-management/map-technique-coverage.html?contentId=p48MZgJNBe34of_GFDyRxw) - [Define the mitigation coverage](https://www.servicenow.com/docs/r/security-management/define-the-mitigation-coverage.html?contentId=7~y~KVaPQihsitfn1C_3Vg) - [Technique mitigation coverage definitions](https://www.servicenow.com/docs/r/security-management/technique-mitigation-coverage-definitions.html?contentId=rF2dbndmFXitBfJikZ2Wzw) - [Map your mitigation coverage to a technique](https://www.servicenow.com/docs/r/security-management/map-your-mitigation-coverage-to-a-technique.html?contentId=JyYaNwNfzewOaZMlL2U9GQ) - [Overall technique mitigation coverage calculator](https://www.servicenow.com/docs/r/security-management/mitigation-coverage-calculator.html?contentId=w4L~yocAQisRULtTCCCTug) - [Create and map detection rules](https://www.servicenow.com/docs/r/security-management/create-detection-rules.html?contentId=73GGvOls7K6r3AU0Wb4tZA) - [Auto-extract technique rules for importing MITRE-ATT&CK information](https://www.servicenow.com/docs/r/security-management/auto-extract-technique-rules.html?contentId=IZ1x8jm7DUx2viVc3RFrQg) - [Review threat group and MITRE-ATT&CK techniques mapping](https://www.servicenow.com/docs/r/security-management/review-threat-group-and-techniques-mapping.html?contentId=Nykt56J7~a_RSXWfuQwxDw) - [Threat group to technique heatmap definition](https://www.servicenow.com/docs/r/security-management/threat-group-to-technique-heatmap-definition.html?contentId=1jTvRgheC1b_6v01odEBNg) - [Review the MITRE-ATT&CK system properties](https://www.servicenow.com/docs/r/security-management/configure-mitre-att-ck-properties.html?contentId=qKQpxmKwmMHSG6tJ~e4tIA) - [Using MITRE-ATT&CK to detect and analyze threats](https://www.servicenow.com/docs/r/security-management/mitre-att-ck-features.html?contentId=oVWX~xoBrEyKKKz6piCsFg) - [Associate MITRE-ATT&CK information with security incidents](https://www.servicenow.com/docs/r/security-management/associate-mitre-with-sir.html?contentId=RqgmoDbPoGR9mlnueMTazA) - [Associate MITRE-ATT&CK information with observables](https://www.servicenow.com/docs/r/security-management/associate-mitre-observables.html?contentId=Atn8v56XC_6OjZBpiMu~Pg) - [Associate MITRE-ATT&CK information with security case](https://www.servicenow.com/docs/r/security-management/associate-mitre-att-ck-information-with-security-case-management.html?contentId=OFtGhjiM2jSwsLOQX4~aAg) - [Rollup MITRE-ATT&CK information using Threat Lookup results](https://www.servicenow.com/docs/r/security-management/rollup-threat-lookup-results.html?contentId=egcEDcalSoKbtJqZT~1eeg) - [Rollup MITRE-ATT&CK information from detection rules](https://www.servicenow.com/docs/r/security-management/rollup-mitre-attack-information-detection-rules.html?contentId=~LeQ8P1N1Kj4pKUnLKfNTw) - [Rollup MITRE-ATT&CK information from child security incidents](https://www.servicenow.com/docs/r/security-management/rollup-mitre-att-ck-information-from-child-security-incidents.html?contentId=8kYL44zrZ1lVYDNPfAqpiA) - [Perform link analysis and threat hunting](https://www.servicenow.com/docs/r/security-management/link-analysis-threat-hunt-mitre.html?contentId=kGDWvoTsNZ22bGI_VxnHnA) - [MITRE-ATT&CK heat map and navigator](https://www.servicenow.com/docs/r/security-management/mitre-att-ck-heatmap-and-navigator.html?contentId=UzqKsZA5D2eEJQUq8Me7kA) - [Using the MITRE-ATT&CK dashboard](https://www.servicenow.com/docs/r/security-management/mitre-dashboards.html?contentId=dKJu8mKS0MPWV4wTsgaVJg) - [MITRE D3FEND framework](https://www.servicenow.com/docs/r/security-management/mitre-d3fend-framework.html?contentId=4ghiGYY8euOHJLelY5nTZQ) - [Ingest MITRE D3FEND data](https://www.servicenow.com/docs/r/security-management/ingest-mitre-defend-data.html?contentId=kIecyQCy~xeXxLzpxolxCA) - [MITRE D3FEND tables](https://www.servicenow.com/docs/r/security-management/mitre-defend-tables.html?contentId=tOY6zUKhIewg2~SiBAaExw) - [MITRE ATLAS framework](https://www.servicenow.com/docs/r/security-management/about-mitre-atlas.html?contentId=6vy3wbsBzuV7db~SMrFdAw) - [Activate the MITRE ATLAS framework](https://www.servicenow.com/docs/r/security-management/setup-mitre-atlas-profile.html?contentId=EBY1kKF4DaNWZvR4c6WkVQ) - [Review the MITRE ATLAS system properties](https://www.servicenow.com/docs/r/security-management/configure-mitre-atlas-properties.html?contentId=q4hPCvE_tJwI8NBogK_vng) - [View MITRE ATLAS information in the MITRE Card](https://www.servicenow.com/docs/r/security-management/mitre-atlas-card.html?contentId=6P0ientcV~KezKVecGeokA) - [Associate MITRE ATLAS information with security incidents](https://www.servicenow.com/docs/r/security-management/associate-mitre-atlas-with-sir.html?contentId=cDj1OFQMDrM1252OxUk0Dg) - [Map data sources and detection tools for MITRE ATLAS](https://www.servicenow.com/docs/r/security-management/manage-mitre-atlas-data-sources.html?contentId=KwGpv1CecIxa7LFaa0VbCA) - [View and activate a MITRE ATLAS matrix](https://www.servicenow.com/docs/r/security-management/manage-mitre-atlas-matrices.html?contentId=vbG1oMFy2fLs8Ca1FS1Ivw) - [Threat Intelligence administration](https://www.servicenow.com/docs/r/security-management/r_ThreatRespAdmin.html?contentId=MI~GiP1lhSulJU8ctyCr~Q) - [Threat Lookup Finding Calculators](https://www.servicenow.com/docs/r/security-management/threat-lookup-finding-calculators.html?contentId=nRHPfP~ubYvDwoCJJEs4SQ) - [Using Threat Lookup Finding Calculators](https://www.servicenow.com/docs/r/security-management/using-threat-calculators.html?contentId=RT~jzXkk95CQATer96FEXA) - [Threat Intelligence integrations](https://www.servicenow.com/docs/r/security-management/threat-intelligence-integrations.html?contentId=NGo1bMyT9iIVKsLHUxnuwQ) - [CrowdStrike Falcon Intelligence integration](https://www.servicenow.com/docs/r/security-management/crowdstrike-intell-landing-page.html?contentId=aMb8xGhjeIHaEYHWQemdmw) - [CrowdStrike Falcon Intelligence integration overview](https://www.servicenow.com/docs/r/security-management/crowdstrike-intell-integration.html?contentId=pgh~KL_xrTIGo5SrmrO7oQ) - [Have I been pwned? integration](https://www.servicenow.com/docs/r/security-management/haveibeenpwned-landing-page-d38907e78413.html?contentId=6K9umK4jLFLqnr5qzhbwRw) - [Have I been pwned? integration setup](https://www.servicenow.com/docs/r/security-management/haveibeenpwned-setup-d38907e78446.html?contentId=4t7OGqb_iwjovVTr6xBnqQ) - [Threat Lookup - Have I been pwned? flow](https://www.servicenow.com/docs/r/security-management/threat-lookup-haveibeenpwned-wf-d38907e78479.html?contentId=fiA9Apw3fsU16J2e0~cWBA) - [Activate](https://www.servicenow.com/docs/r/security-management/activate-haveibeenpwned-d38907e78512.html?contentId=X1h6HupsrF~2OgtUurmSfQ) - [Update X.509 certificate](https://www.servicenow.com/docs/r/security-management/update-cert-pawnd-d38907e78545.html?contentId=SPwE~zROuP15zvqjmzNoIg) - [MISP integration for Security Operations](https://www.servicenow.com/docs/r/security-management/misp-integration-for-security-operations.html?contentId=UV98LSvQeGe17lX6uo~71w) - [MISP administration](https://www.servicenow.com/docs/r/security-management/misp-administration.html?contentId=ScSNQs_B8qmqe5k1kCXe3A) - [Getting started with MISP integration for Security Operations](https://www.servicenow.com/docs/r/security-management/get-started-with-misp-integration-for-security-operations.html?contentId=~DBtdjwDFKY~_~~vQYJGfw) - [MISP user roles and permissions](https://www.servicenow.com/docs/r/security-management/misp-user-roles-and-permissions.html?contentId=blsj0LSja0IznJoT0MPS1w) - [Install and configure the MISP integration for Security Operations](https://www.servicenow.com/docs/r/security-management/install-and-configure-misp.html?contentId=1YxJBEsQRsktSswpLVgLFQ) - [Review the MISP integration settings](https://www.servicenow.com/docs/r/security-management/review-the-misp-integration-settings.html?contentId=Aj8dHKl6VSnfWTWpzlYGmQ) - [Configure MISP sighting searches](https://www.servicenow.com/docs/r/security-management/configure-sightings-search.html?contentId=RhgnT5eWol0rXmeovHJ0Eg) - [Configure how an automatic event is created](https://www.servicenow.com/docs/r/security-management/configure-automatic-event-creation-profile.html?contentId=Rbe5MdizPF0T3mHXjzJC~A) - [MISP event data](https://www.servicenow.com/docs/r/security-management/misp-event-data.html?contentId=vX7r7WXWCALZIrysgAkZnA) - [Associated MISP events](https://www.servicenow.com/docs/r/security-management/associated-misp-events.html?contentId=P5jz19wViIFEThTHJoT_4g) - [MISP user information](https://www.servicenow.com/docs/r/security-management/misp-user-information.html?contentId=jPQcT5K64kUbux6s4eXI5w) - [Domain separation and MISP](https://www.servicenow.com/docs/r/security-management/domain-separation-and-misp.html?contentId=toPVFeSn4fvA_cXU7DRZrA) - [Troubleshooting MISP integration](https://www.servicenow.com/docs/r/security-management/troubleshooting-misp-integration.html?contentId=teK9l679DFqZ1v0cjsuFCw) - [Using MISP to investigate and analyze threats](https://www.servicenow.com/docs/r/security-management/using-misp-to-detect-and-analyze-threats.html?contentId=ghb38OPes3tyZHuL7Flctg) - [Sighting searches in MISP](https://www.servicenow.com/docs/r/security-management/sightings-searches-in-misp.html?contentId=VNAnL35AliYx330WehDVbQ) - [Observable enrichment in MISP](https://www.servicenow.com/docs/r/security-management/observable-enrichment-in-misp.html?contentId=ARBTdo3pThYuIad6tvCNvw) - [Managing events in MISP](https://www.servicenow.com/docs/r/security-management/events-in-misp.html?contentId=jLhBCov1va~yXci4yq06Sg) - [Roll up MITRE-ATT&CK information using MISP enrichment results](https://www.servicenow.com/docs/r/security-management/rollup-mitre-information-using-misp-enrichment-results.html?contentId=fyV9dzSHEk4FB6RF_b3M_A) - [OPSWAT Metadefender Integration](https://www.servicenow.com/docs/r/security-management/metadefender-landing-page.html?contentId=tb1WSyJPrwzSV80~WiaEpQ) - [OPSWAT Metadefender integration overview](https://www.servicenow.com/docs/r/security-management/c_Metadefenderintegration.html?contentId=3MOIMbITLs840XOs9wMAyw) - [VirusTotal integration](https://www.servicenow.com/docs/r/security-management/virustotal-landing-page.html?contentId=IRv6rB7X9B75ZO8EyeoqUA) - [VirusTotal integration setup](https://www.servicenow.com/docs/r/security-management/virustotal-setup.html?contentId=FjAnakipqDKxkq3qyjKSlA) - [Activate and configure the VirusTotal integration](https://www.servicenow.com/docs/r/security-management/activate-configure-virustotal.html?contentId=Bwwku7pnsx4YIgygiCJ_Dg) - [Threat Lookup - VirusTotal workflow](https://www.servicenow.com/docs/r/security-management/threat-lookup-virustotal-wf.html?contentId=gD~qPfJ89_piZscMFjwq1A) - [WhoisXML API integration](https://www.servicenow.com/docs/r/security-management/whois-landing-page.html?contentId=wnDEZkXa~Efh3R5Vf~uPPg) - [WhoisXML API integration setup](https://www.servicenow.com/docs/r/security-management/whois-integration-setup.html?contentId=a64nHL1wC2vx2XfO62ZATw) - [Activate and configure the Security Operations Whois integration](https://www.servicenow.com/docs/r/security-management/activate-whois.html?contentId=rBwG8E2q6DhF~nM45i4lAA) - [Update your X.509 certificate](https://www.servicenow.com/docs/r/security-management/update-cert-whois.html?contentId=Dzr_AOsUOUO5bUQhxcX~4w) - [Enrich Observable WhoIs workflow](https://www.servicenow.com/docs/r/security-management/enrich-observable-whois-wf.html?contentId=yCmZHG8TzivPAXIIZZY7sw) - [Threat Intelligence Orchestration](https://www.servicenow.com/docs/r/security-management/c_ThreatIntelligenceOrchestration.html?contentId=ucYXggXAEMqUN_35~WA0rA) - [Set up Threat Intelligence Orchestration](https://www.servicenow.com/docs/r/security-management/t_ThreatIntelligenceOrchestrationSetup.html?contentId=PckB_3bufHbYvqVC46vUcg) - [Threat Intelligence Orchestration workflows and activities](https://www.servicenow.com/docs/r/security-management/threat-orch-wfs-and-activities.html?contentId=OTrBykGY_eu5G3MRrQWMhA) - [Security Case Management](https://www.servicenow.com/docs/r/security-management/case-mgmt.html?contentId=wkn0VeD4Uf6uNuvlmoP90w) - [Create cases in Security Case Management](https://www.servicenow.com/docs/r/security-management/create-cases-in-case-mgmt.html?contentId=7AU2UchoNM0ZSXS3aolvSg) - [Add artifacts to a case](https://www.servicenow.com/docs/r/security-management/add-records-to-cases.html?contentId=2bX4IDBCD_~90O21Q3Dl2g) - [Associate MITRE-ATT&CK information with security case](https://www.servicenow.com/docs/r/security-management/associate-mitre-att-ck-information-with-security-case-management-mitre.html?contentId=YueksAm07HKolj~wFfhCbg) - [Case creation from security artifacts](https://www.servicenow.com/docs/r/security-management/case-creation-from-security-artifacts.html?contentId=UL8mEMg6UOAKfIxORppjTw) - [IoCs and observables in cases](https://www.servicenow.com/docs/r/security-management/cases-in-threat.html?contentId=7hg01S5cOpj4PK9iAm6AWw) - [Create a case from IoCs or observables](https://www.servicenow.com/docs/r/security-management/create-cases-threat.html?contentId=7x9EHAS0x4_n4mf6RBFiqg) - [Add IoCs and observables to an existing case](https://www.servicenow.com/docs/r/security-management/add-records-to-cases-threat.html?contentId=JL5eh_Kh7A7r88JGYIjGzA) - [Create an observable from a case](https://www.servicenow.com/docs/r/security-management/create-an-observable-from-a-case.html?contentId=rN38YQ6QGNEsSBkNVbLi7Q) - [Run a sightings search on observables in a case](https://www.servicenow.com/docs/r/security-management/run-local-sighted-srch.html?contentId=pwN5QBnB4G9cjXHeyPX3sA) - [Security incidents in cases](https://www.servicenow.com/docs/r/security-management/case-in-sir.html?contentId=VNTDPbBCFdWyew5MEIw4vQ) - [Create a case from security incidents](https://www.servicenow.com/docs/r/security-management/create-cases-from-security-incidents.html?contentId=~c1eA4qsofu5Z13DGmziZA) - [Add security incidents to an existing case](https://www.servicenow.com/docs/r/security-management/add-sec-inc-to-cases.html?contentId=0_cBmgn16ZgvemK9WSbWpw) - [Configuration items in cases](https://www.servicenow.com/docs/r/security-management/cases-from-cis.html?contentId=t29EIFfjnuO1MoYu~K0hSA) - [Create a case from CIs](https://www.servicenow.com/docs/r/security-management/create-cases-from-CIs.html?contentId=_9g38fnqGBHJLIF7RKJwsQ) - [Add CIs to existing cases](https://www.servicenow.com/docs/r/security-management/add-cis-to-cases-sir.html?contentId=vWSHY3xjYpGurgrBnIMuWg) - [Affected users in cases](https://www.servicenow.com/docs/r/security-management/cases-from-affected-users.html?contentId=_8VsrGbr1tSnTo4EWDJ7FA) - [Create a case from affected users](https://www.servicenow.com/docs/r/security-management/create-cases-from-affected-users.html?contentId=lxQW5f_uZzRkepCLcT~mrw) - [Add affected users to existing cases](https://www.servicenow.com/docs/r/security-management/add-users-to-cases-sir.html?contentId=i5JfFosqyCD5fLG9wn_JLw) - [Security artifact analysis](https://www.servicenow.com/docs/r/security-management/sec-artifact-analysis.html?contentId=dRFYZbAx7ExTMfwK7pugMA) - [Related details for case artifacts](https://www.servicenow.com/docs/r/security-management/related-details-for-case-artifacts.html?contentId=SFNyyHgrIoOn9T1Opa2dgA) - [View related details for a security incident artifact](https://www.servicenow.com/docs/r/security-management/view-related-details-for-sec-inc-artifact.html?contentId=a30SDzIWpBRwntpTDXSY2w) - [View related details for a configuration item artifact](https://www.servicenow.com/docs/r/security-management/view-related-details-for-ci-artifact.html?contentId=3OqMzx1i~JuyQGyHK_LQLg) - [View related details for an IoC artifact](https://www.servicenow.com/docs/r/security-management/view-related-details-for-ioc-artifact.html?contentId=xPFtaKgWYx2Z6avlhAh_5Q) - [View related details for an affected user artifact](https://www.servicenow.com/docs/r/security-management/view-related-details-for-user-artifact.html?contentId=3GdChDyMvrZOvyArDEUT1Q) - [View related details for an observable artifact](https://www.servicenow.com/docs/r/security-management/view-related-details-for-observ-artifact.html?contentId=I1ohYe~xF7j8j8eruNV2PA) - [Security artifact exclusion and inclusion](https://www.servicenow.com/docs/r/security-management/artifact-inclusion-exclusion.html?contentId=9VkaTDp~bnW4u9ejSvBT4Q) - [Exclude security artifacts from a case](https://www.servicenow.com/docs/r/security-management/exclude-records.html?contentId=HgSQJR4agEF0YrFrVsHhcA) - [Return excluded security artifacts to a case](https://www.servicenow.com/docs/r/security-management/include-artifacts.html?contentId=M34fVpSqmaPXQu20UaWj0w) - [Annotate security artifacts](https://www.servicenow.com/docs/r/security-management/annotate-artifacts.html?contentId=Ws9661H~M7I~W7HnCKVAtA) - [Search for security artifacts](https://www.servicenow.com/docs/r/security-management/search-for-artifacts.html?contentId=w2N97dh9qGVdC6UqyoGVIA) - [Security Posture Control](https://www.servicenow.com/docs/r/security-management/spc-landing.html?contentId=af4vZFTlGB3Lh_rgf65WVg) - [Explore](https://www.servicenow.com/docs/r/security-management/spc-overview.html?contentId=HG4U5ZjaoCYgnGvZL7VJBA) - [Install supported applications](https://www.servicenow.com/docs/r/security-management/spc-install.html?contentId=FjnBMOQ79FZdL43ryo2dZw) - [Supported Service Graph Connectors](https://www.servicenow.com/docs/r/security-management/spc-use-connectors-policies.html?contentId=Xgm9_VU_Kvn~8mjHm~LGow) - [Policies](https://www.servicenow.com/docs/r/security-management/spc-policies-overview.html?contentId=VRF07SOlfUu1yXbHe~zC7w) - [Included policies](https://www.servicenow.com/docs/r/security-management/spc-polices-included.html?contentId=JpBd308eL6e4Tgbr0w7Wew) - [Creating your own policies](https://www.servicenow.com/docs/r/security-management/spc-creating-policies.html?contentId=btUbAIUurh55gg3YNQMRBA) - [Insights](https://www.servicenow.com/docs/r/security-management/spc-custom-insight-overview.html?contentId=wGX~_UMhLQnZ~zg_6yu_jg) - [Use the workspace](https://www.servicenow.com/docs/r/security-management/spc-workspace.html?contentId=OL1DfkpxBcW7mRwv1cdLdg) - [Activate a policy](https://www.servicenow.com/docs/r/security-management/spc-activate-a-policy.html?contentId=n9ZF3COPSnqF5CU0avbvYA) - [Create and activate custom policies](https://www.servicenow.com/docs/r/security-management/spc-create-policy.html?contentId=AvSjuAh7MXNhkHnZDlKGqQ) - [Edit an activated policy in Security Posture Control](https://www.servicenow.com/docs/r/security-management/spc-edit-policy.html?contentId=Z2~DGuAwq4H6jJvTSSvNZw) - [Clone and create child policies](https://www.servicenow.com/docs/r/security-management/spc-clone-policy.html?contentId=xHUu5i0zKKyVGOeXiLP8Lg) - [Create and activate a configured insight](https://www.servicenow.com/docs/r/security-management/spc-create-custom-insight.html?contentId=0tpDj0z5Swuinri74vTq2A) - [Create an asset profile](https://www.servicenow.com/docs/r/security-management/asset-profile.html?contentId=bKKO8Rkb5scxFxOln5_3fg) - [Delete a profile](https://www.servicenow.com/docs/r/security-management/spc-delele-asset-profile.html?contentId=mGap8AeNTC1l_FHHMrQT8A) - [Configuring and viewing findings](https://www.servicenow.com/docs/r/security-management/spc-view-findings.html?contentId=qgHAzGTPd1wLLxkZG99Chw) - [Test result and remediation task state transitions](https://www.servicenow.com/docs/r/security-management/spc-findings-state-transition.html?contentId=sjuSPn5es5ufb6SOe9d9VQ) - [Creating your own API connector](https://www.servicenow.com/docs/r/security-management/spc-creating-sgc-template.html?contentId=lYJEIQFx_sg8TitOIU6Iqg) - [Enter connector metadata](https://www.servicenow.com/docs/r/security-management/spc-sgc-template-stepper1.html?contentId=UDFYFU4Kw1u7FKcvAjrUYA) - [Enter credentials](https://www.servicenow.com/docs/r/security-management/spc-sgc-template-stepper2.html?contentId=mGPTj8TGl2g0HJBM9tbi_w) - [Select a template](https://www.servicenow.com/docs/r/security-management/spc-sgc-template-stepper-3.html?contentId=cIW~xK_MfGRTE3RKct6NjA) - [Provide input values](https://www.servicenow.com/docs/r/security-management/spc-sgc-template-stepper-4.html?contentId=aMumWY9glw~MlmZ3OMu_DA) - [Map API response to SPC attributes](https://www.servicenow.com/docs/r/security-management/spc-sgc-stepper-5.html?contentId=tMNO0vAc0yWQpyKT1DsP6w) - [Validate connector](https://www.servicenow.com/docs/r/security-management/spc-sgc-validate-api-connector.html?contentId=JrT4p8bgHI8Gn6mclR2rZQ) - [Create an instance and set the import schedule](https://www.servicenow.com/docs/r/security-management/spc-sgc-stepper-6.html?contentId=ifpTc_8fSMcmrKuKhJNwBQ) - [Create an asset search](https://www.servicenow.com/docs/r/security-management/spc-asset-search.html?contentId=GY6KKouzxRlq_zuQydlDVw) - [Resolving duplicate configuration items in SPC](https://www.servicenow.com/docs/r/security-management/spc-using-dedup-template.html?contentId=DA6Qj4l7VKkvUgzgAlt2zA) - [Resolve duplicate configuration items in SPC](https://www.servicenow.com/docs/r/security-management/spc-resolve-duplicate-cis.html?contentId=mjOhGS1UKbEMNx5H_Ox1HQ) - [Use mitigation controls](https://www.servicenow.com/docs/r/security-management/spc-mitigation-exploring.html?contentId=Eovbv_g0z9~CpGEVx6zsDA) - [Mitigation controls policies](https://www.servicenow.com/docs/r/security-management/spc-mitigation-policies.html?contentId=qOzpefxh7Dv4k_2M2IEDdg) - [Policies for Exploit Protection (EDR)](https://www.servicenow.com/docs/r/security-management/spc-controls-policies-for-edr.html?contentId=BOOVnKbsq_lp3hJ7bQH4CA) - [Install CrowdStrike integrations](https://www.servicenow.com/docs/r/security-management/spc-install-config-controls.html?contentId=WgT5tifXHrnqyPdyd5N31g) - [Install Microsoft integrations](https://www.servicenow.com/docs/r/security-management/spc-install-config-sccm-defender.html?contentId=1cvP_2B9C86qZjHj6SVrkg) - [Create multiple instances](https://www.servicenow.com/docs/r/security-management/spc-new-instance-sccm-defender.html?contentId=7aImkHIxPwkC4UpiqiSsUA) - [Install SentinelOne integrations](https://www.servicenow.com/docs/r/security-management/spc-install-config-sentinelone-mc.html?contentId=D_~mmcTA8_K7HKU0tl38Xw) - [Exploit protection (WAF)](https://www.servicenow.com/docs/r/security-management/spc-controls-policies-for-exploit-waf.html?contentId=x_~RK6u2O0FqkQyHqpEhyg) - [Configure F5 BIG-IP integrations](https://www.servicenow.com/docs/r/security-management/spc-install-config-f5-controls.html?contentId=6fwOAUT6u5zmqjIfv2OJlw) - [Configure the AWS WAF integration](https://www.servicenow.com/docs/r/security-management/spc-install-config-aws-waf.html?contentId=mhTuxp~B9UFg9rX~XwftuQ) - [Create a policy for AWS WAF](https://www.servicenow.com/docs/r/security-management/spc-create-AWS-WAF-policy.html?contentId=oH~rAwEZPJK4DvpyATv73g) - [View detected mitigations](https://www.servicenow.com/docs/r/security-management/spc-activate-controls-monitoring.html?contentId=KMKbAPubO3Vahzh8kJQ4mQ) - [Mapping mitigations](https://www.servicenow.com/docs/r/security-management/spc-mitigation-vit-mapping.html?contentId=3rSCAarK~paOFl5PVEIOeg) - [Reference](https://www.servicenow.com/docs/r/security-management/spc-policies.html?contentId=j5ETqAie8ntuddJiyeVhRQ) - [Assets without endpoint protection](https://www.servicenow.com/docs/r/security-management/spc-use-case-1.html?contentId=r_rPLBlEhnDEUdlD0TY4Fw) - [Assets missed by vulnerability assessment](https://www.servicenow.com/docs/r/security-management/spc-use-case-2.html?contentId=GMy57wqM87f2j0bbg83uuw) - [Unmanaged assets](https://www.servicenow.com/docs/r/security-management/spc-use-case-3.html?contentId=wmMpc74dUM~2pjs9_aqujw) - [Assets missing endpoint management](https://www.servicenow.com/docs/r/security-management/spc-use-case-4.html?contentId=w9hUdF4bq76l3_26FP_VXw) - [Assets with vulnerabilities](https://www.servicenow.com/docs/r/security-management/spc-use-case-5.html?contentId=4F_EmxWeABaCTQHLPNIfKw) - [Cloud assets and high-risk combinations](https://www.servicenow.com/docs/r/security-management/spc-use-case-6.html?contentId=MZN8fcuO4bF1V9xtYab~XA) - [Hardware Service Graph Connectors](https://www.servicenow.com/docs/r/security-management/scp-hw-connectors-ci-classes.html?contentId=T_AtJ_9uDK_Zglf__AMc0g) - [Software Service Graph Connectors](https://www.servicenow.com/docs/r/security-management/spc-connector-types-ci-classes.html?contentId=vJ_z1t5Bnw0E~MAgNi_Ycg) - [Policy examples](https://www.servicenow.com/docs/r/security-management/spc-policy-examples.html?contentId=GCdyY~4y2zecPKuo~5ccNg) - [Create a base policy for Security Posture Control (example)](https://www.servicenow.com/docs/r/security-management/spc-create-base-policy-example.html?contentId=_~6T971yCiWM1JjrHqAKKw) - [Create a child policy from a base policy for Security Posture Control (example)](https://www.servicenow.com/docs/r/security-management/spc-create-child-policy-example.html?contentId=dUqCAlWkojKXufn02r06ng) - [Cybersecurity Executive Dashboard](https://www.servicenow.com/docs/r/security-management/vr-unified-CISO-dashboard.html?contentId=jadNymZWclLRz8MLTzNnhw) - [Opt-in for benchmark scores](https://www.servicenow.com/docs/r/security-management/vr-retrieve-benchmark-results.html?contentId=HMYhpL1rHYennQM99yhXuw) - [Set targets](https://www.servicenow.com/docs/r/security-management/set-targets-cybersecurity-dashboard.html?contentId=Gg7qy3D~t4z2gsh9X1Av4A) - [Security Simulation and Training Integration for Security Operations](https://www.servicenow.com/docs/r/security-management/integrate-phishing-integrations.html?contentId=OW3Log4fAhBDZiwbgd32jw) - [Configure Knowbe4 integration](https://www.servicenow.com/docs/r/security-management/configure-knowbe4-integration-vr.html?contentId=ToSRjmyjuykTiabkxMThzw) - [Configure Microsoft Defender for Office 365 integration](https://www.servicenow.com/docs/r/security-management/configure-microsoft365-defender-integration-vr.html?contentId=64oOv_wg~~n02MeyYDvUZQ) - [Risk and compliance dashboard for GRC: Metrics](https://www.servicenow.com/docs/r/security-management/grc-cybersecurity-risk-compl-dashboard.html?contentId=DUgyjXyHRDZulSg7yXyncA) - [Risk and Compliance Dashboard reports and solutions](https://www.servicenow.com/docs/r/security-management/grc-ced-risk-compliance-db-reports.html?contentId=A0TyafAm5wTLPQs1wO0byw) - [Threat Intelligence Security Center](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-landing-page.html?contentId=rXb9GzESNNw5KSN9DOT95Q) - [Explore](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/threat-intelligence-security-center-overview.html?contentId=VZBC0I60TZ6ke4N__3fgOg) - [TISC Key terminology](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-key-terminology.html?contentId=GsRK1PU_AEO~flbAwILYwg) - [TISC Workspace](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/view-threat-intelligence-security-center-homepage.html?contentId=QZEG3z9pgqMabp2bhL4X_A) - [Configure](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-configure.html?contentId=mlVH2C7jNHfoVgvCcy5JGA) - [Download TISC application from ServiceNow Store](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-download-app-first-time.html?contentId=~Baq8DiM4wGtrD6UZ9R0Pg) - [Set up Threat Intelligence Security Center](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/set-up-threat-intelligence-security-center.html?contentId=BHgj4_AMQa5VuRRKqtIxdg) - [Set Threat Intelligence Security Center properties](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-set-properties.html?contentId=Fx6sa43OkpRz0IErxPx_dg) - [Integrate](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/integrating-threat-intelligence-security-center.html?contentId=~Q_9bDHgAhs7crO0OAqWng) - [Threat Intelligence Security Center Catalog](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/threat-intelligence-security-center-catalogue.html?contentId=PQ8S6iiSGJgmR3CAmaF1VQ) - [Threat Intelligence Feeds](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/threat-intelligence-feeds.html?contentId=~PtkrKU5QmGrLyucAjKqPQ) - [Configure a new threat intelligence feed](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-new-data-source.html?contentId=9a1teAado6qwrLxD10Qi~w) - [Configure Custom Field Mapping](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-field-mapping.html?contentId=CV67QTom_k390bv~1v1_pg) - [View Threat Intel Feeds](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/base-system-threat-intel-feeds.html?contentId=AvkgC1VDl0fflvthwGTfzQ) - [View STIX TAXII Feeds](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/view-stix-taxii-feeds.html?contentId=5VMdeJ8NVM6bsYLFGueAhA) - [View STIX HTTPs Feeds](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/view-oob-stix-https-feeds.html?contentId=DKUCYvXlXMnv7t5uxjOoyw) - [View MISP Feeds](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/view-oob-misp-feeds.html?contentId=LoqJlT~wJq7HpVZ9U4emHw) - [View Text Feeds](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/view-oob-text-format-feeds.html?contentId=fRoadad0YAHL0D3ta0AfTg) - [View CSV Feeds](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/view-oob-csv-feeds.html?contentId=XM19kf1rFwZhFklquXNr6A) - [View JSON Feeds](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-json-feeds.html?contentId=Vz9aXmtCTV0xAk8TBeM5sA) - [View RSS Feeds](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-rss-feeds.html?contentId=O8lSnqW8Drlj7Oc5BLvwIA) - [View Custom Feed](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/view-oob-custom-feeds.html?contentId=u_LIcQIxuqwilB0NgF~_zQ) - [Configure Premium Threat Feed for CrowdStrike](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/premium-threat-feed-for-crowdstrike.html?contentId=0LkCsSHDbNMg93PB9BCx9g) - [System Properties for CrowdStrike](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/premium-threat-feed-system-properties.html?contentId=ceLYfsI58uWxb7lqsConfw) - [Configure custom MISP API feed](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-premium-misp.html?contentId=UJ5LwjWzbukAXCduxaWz2g) - [About STIX TAXII](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/threat-intelligence-security-center-feeds.html?contentId=UXAV71y7a78T_dIOOSRG5g) - [Configure a new TAXII Feed](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-configure-a-new-taxii-feed.html?contentId=lfX095tBuqIEdBr4pOZGLQ) - [Duplicate threat intelligence feeds](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-duplicate-feeds.html?contentId=U8QO68m4xkfbSqow2~n0GQ) - [TISC Integrations](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-integrations.html?contentId=Hijb16jc9yYQLJjTN869vQ) - [TISC Enrichment integrations](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-enrichment-integrations.html?contentId=2JTQDQp4LnznR6fTFit2BA) - [Configure new enrichment](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-config-new-enrich.html?contentId=MZPtTCyZCPt0jDGkPnSTeQ) - [Configure Observable Enrichment](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/configure-observable-enrichment.html?contentId=c7ZY6d1p1pndHuQNglC~jg) - [Have I Been Pwned integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-hibp-integration.html?contentId=OOahcD2kuY5E9HCyO86bJg) - [Configure and enable Have I Been Pwned integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-config-hipw-integration.html?contentId=oevf7AE~xWh9ucrLxOdi5Q) - [Whois integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-whoisxml-integration.html?contentId=2gyn01jYQU0z~FL6sgw06g) - [Configure and enable Whois integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-whoisxml-api-integration.html?contentId=tKmF_TcYN~lNg7SaVqbyTQ) - [Shodan integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-shodan.html?contentId=xEhevKxL8Fcfs8t30tX9rQ) - [Configure and enable Shodan integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/shodan-integration.html?contentId=cH8s9vWo6~SJIV00a7Z2Ew) - [Configure Sighting Search](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/configure-sighting-search.html?contentId=2vhJT11vKT42qVuKMDpTtg) - [Create Sighting Search queries](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/manage-sighting-search-configurations.html?contentId=nLRDaDwpek~mTz0jP0Z6yA) - [Using Sighting Search parameters](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/manage-sighting-search-parameters.html?contentId=uuIsTnTB4~NCW1qMCsjxVw) - [Get started with Sighting Search Configurations](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-get-sighting-configs.html?contentId=a6t6xMIyi~gIDHITcfgZbg) - [Configure and enable Elasticsearch integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-elasticsearch-integration.html?contentId=FIhdE7OlXXBLld7L4DfnaA) - [Configure and enable Splunk integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-splunk-integration.html?contentId=8_ejZBM2cwy8DaxB~wbZwg) - [Configure CrowdStrike NextGen SIEM sighting search](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-crowdstrike-ngsiem-integration.html?contentId=~O5DzNOFgxOG7PCbViQH2w) - [Configure Threat Lookup](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/configure-threat-lookup.html?contentId=nyjXC~V1QtS99k_29OGCXw) - [View Threat Lookup Reputation Calculators](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/view-threat-lookup-reputation-calculators.html?contentId=ij~5zPaWNRN91HTNWDKwLw) - [Threat Lookup](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-threat-lookup.html?contentId=6lqC6t8h3obyKWk~h5NnZQ) - [TISC VirusTotal integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-virustotal-integration_0.html?contentId=sH37ozJ7ZYzcO~xd~4fJFA) - [Configure and enable VirusTotal Integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-virustotal-integration.html?contentId=kCnq~nxdpVUMLP9Cl1COkA) - [TISC CrowdStrike Falcon Intelligence integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-crowdstrike-falcon-intelligence-integration.html?contentId=DUvDc3R9y9Eg~YKyCWV~RA) - [Configure and enable CrowdStrike Falcon Intelligence integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/crowdstrike-intelligence.html?contentId=Jt4McHVNWAaD~IQPG2Yrwg) - [TISC Security Tools integrations](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-edr-integrations.html?contentId=90s2CavEmjCN_Wmrey~ZMg) - [CrowdStrike Falcon EDR integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/crowdstrike-edr-integration.html?contentId=JBnRFRpZGaZORS3~f0N0~w) - [Configure Crowdstrike Falcon EDR integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/config-cs-edr-integration.html?contentId=CF8ipLLUzsv20zsIkYwT3w) - [Send observables to EDR](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/send-to-edr.html?contentId=M75NBC_wqukpHDQ_aX9oig) - [Microsoft Defender for EDR integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-ms-defender-integration.html?contentId=DvHZkJj2gwtOj9JWtLozzA) - [Register and configure the Microsoft Defender in the Microsoft Azure portal](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/register-and-configure-the-microsoft-defender-in-the-microsoft-azure-portal.html?contentId=_tA0~nmvCr442SZrdLfhlw) - [Install and configure Microsoft Defender for EDR Integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-ms-defender-configure.html?contentId=uhIO1aMckyk224D9IfwoJQ) - [System properties for Microsoft Defender EDR](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-defender-sys-props.html?contentId=2b4FsD2gzC5SLlv0KVy1Uw) - [Send observables to EDR](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-ms-defend-edr.html?contentId=z7urr8LM_u2XHC6qB8MgHg) - [Firewall integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-security-tools.html?contentId=34cF9wkw3xKKEsLtehbn_A) - [Palo Alto Networks integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/palo-alto-networks-integration.html?contentId=QuFqF3fMvC8B8po5i3yhKQ) - [Create EDL for Palo Alto Networks](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/create-new-edl.html?contentId=snQA~YeB5ADco7qe2kE8zw) - [Define Palo Alto Networks Approval Rules](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-edl-approval-rules.html?contentId=6W72diLHcxHN7j6dBkgTSQ) - [Add Observables to EDLs](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/add-obsesrvables-edl.html?contentId=SJp4dWvqx8arp48~JwnO4g) - [Remove Observables from EDL](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/remove-observables-edl.html?contentId=tZqKftHH47TflTZpEFF5DA) - [Approve EDL entries for Palo Alto Networks](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-approve-edl-entries.html?contentId=hj0AeoXADzeTVEqL4X27fQ) - [TISC add-on for Splunk overview](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-addon-splunk.html?contentId=JBuVS09zKPEqqzbQwmVQKg) - [TISC integration with Splunk](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/splunk-observables-enrichment-integration.html?contentId=nZC0Lsny5QWtR0rMyXJGkQ) - [Create users in TISC instance](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-create-users.html?contentId=xElNZhQxTvjOTQMZpg3aeg) - [Configure TISC add-on in Splunk](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-configure-splunk.html?contentId=wgIBTGsKaA37js9XCAjV6g) - [Data storage in Splunk](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-storage-splunk.html?contentId=T_1KBlmSME6CUoXz1qAK0A) - [Troubleshoot the TISC add-on in Splunk](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-splunk-troubleshooting.html?contentId=YSELz0GAfLC3eMg3KyFrbg) - [Microsoft Sentinel integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-sentinel-integration.html?contentId=HU3Y2DZCAgHt6tKuoIAMKQ) - [TISC playbook templates](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-playbook-templates.html?contentId=EBiqUC9zJaZR4VlzsXNBbg) - [Administer](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-data-administration.html?contentId=u4DG3mFI4QpQvsfCPgYWbw) - [About Rules Engine in TISC](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-admin-rules-eng.html?contentId=vlgSZn6jvf~auHpK_WW8Qg) - [Defining Data Imports Approval Rules](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/defining-data-imports-approval-rules.html?contentId=zfegasndy6k3jfAtMF5VJg) - [Defining Expiration Rules](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-expiration-rules.html?contentId=olFiMSy9kM~oVleSVgmU~A) - [Expiration rules for source records](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-expiration-source.html?contentId=797X5l4sPKikIzG5PeXjCw) - [Create Inbound Data Exclusion Rules](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-filtering-rules.html?contentId=YD7zsr3IRFZpM4~gufjmCg) - [Custom Threat Score Calculator in TISC](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/using-custom-threat-score-calculator.html?contentId=L9xF1UtBsF5faoHE5BtJFQ) - [Define Threat Score Calculator](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/threat-score-calculator.html?contentId=o01Tr17HquK5LwOFeCyEYQ) - [MITRE ATT&CK Technique Extraction Rules](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/mitre-extraction-rules.html?contentId=4pacVXHfbHI8eA~ekvxR~Q) - [View extracted MITRE ATT&CK Techniques](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/mitre-extraction-method.html?contentId=rQmyW6wEtxMv3sgBjWsGcw) - [Configure Tagging Rules in TISC](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-tag-rules.html?contentId=D6u8wSDXlQCIx056ZCxnzQ) - [Automated creation of zero day vulnerability](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-zero-day-vuln-scenario.html?contentId=fKnhrP05pMybaGMxiI7TfQ) - [About Security Control Lists in TISC](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-admin-security-lists.html?contentId=LTzCHydyu~bmC5e2HL~5lQ) - [Defining Security Control Lists](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-security-control-lists.html?contentId=Rdn0vA12INXPLcHGU7r~Dg) - [Creating Taxonomies](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/create-taxonomies.html?contentId=DhRp2IsHTl_UEkGjSpc21A) - [Bulk import Taxonomies](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-import-taxonomy.html?contentId=_Gl5Rmzy_D~ZM6TZoYsoQQ) - [Customize a skill](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/cust-now-assist-tisc-skill.html?contentId=lU8WYFRgXo6VIt7j08K1zg) - [Inputs and triggers](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/input-triggers-now-assist-tisc.html?contentId=Me~VyzOGAOeEthgvyi1R8Q) - [Customize extraction use cases](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/cust-intel-extraction-tisc.html?contentId=~xEM7tVYaVvupQYagTZnXQ) - [Managing the Threat Lookup Reputation Calculator](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/manage-threat-lookup-reputation-calculator.html?contentId=TWdeaBxss~0GqeLnoxNj9Q) - [Manage email Notifications](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-notifications.html?contentId=ULb7eTiZDTlbq5p4JjT8nQ) - [Email Notifications](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-email-notifications.html?contentId=~Sez_hr3mRQpwBX02PxXiw) - [Email logs](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-email-logs.html?contentId=a8qcRgs5HcGoIEPJY~63VA) - [Configure report styling](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/configure-report-styling-tisc.html?contentId=GYMHeWboFwbGxjhzWPF8RQ) - [Report styling fields](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/ai-report-styling-fields-tisc.html?contentId=5yxRGHQOVsvDCoHjEvTyfA) - [Configure report templates](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-report-templates.html?contentId=IzRjZ7Ha3U5qvoLdhZtBGA) - [Create Report Template](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-new-report-template.html?contentId=ZhupHRMBnlZVuQPKEkA0ow) - [Edit a Published Report Template](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/edit-report-templates.html?contentId=ge2YpqYYkFTBwdEBYsysYw) - [Duplicate a Report Template](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-duplicate-template.html?contentId=mZMDU8ENHhdcGJRxwYraNQ) - [System properties for TISC Reports](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/reports-system-properties.html?contentId=5L1RyN32sHrnkMRG7v8Owg) - [Working with Webhooks](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-webhooks.html?contentId=JLMBpRFf5I8LwgDGQhmQ9Q) - [System properties for Webhooks](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-sysprops-retry.html?contentId=AoGCGwiNLF6E1OvT2Lx9qQ) - [Configure webhooks](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/setup-webhooks.html?contentId=1S5XWA6vikWLIi1UNE8nJg) - [Subscribe Triggers](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/subscribe-triggers.html?contentId=91entArfvR5COqxwHvX4Lw) - [View webhook error logs](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-error-logs.html?contentId=trdNXXJfnnaz5HmZgd3v3w) - [View webhook batches](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-webhook-batch.html?contentId=DRsNxpvce4xjx6lxHh4z3g) - [Webhook Triggers](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-triggers.html?contentId=rCVATQWQMIwd390bHySjPQ) - [Working with automated flows](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-automated-flows.html?contentId=kguf7FmH_lpmjSi_IclH4g) - [Automated IOC Enrichment](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-ioc-enrichment.html?contentId=evt4GZXZ~zoYrXzfJ9ZI5g) - [Automated sharing of high-risk IOC's with trusted partners](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-automated-sharing-flow.html?contentId=O3mGFbzVw96~PHhItdV2pg) - [Automatically add threat intelligence to a TAXII collection](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-taxii-automated-flow.html?contentId=a8seUdzAxTUxO88dfUyOwg) - [Create vulnerability assessment for zero day](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-create-vul-assess.html?contentId=92RNdv6HK~NwK1fxl4AnlA) - [Analyze, assess, and disseminate observables](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-disseminate-observables.html?contentId=32woti7S8tGynQENphtXVA) - [Analyze and assess threat IoC’s](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-analyze-ioc.html?contentId=MSwaPu8QDCkZRcfDYjiGhw) - [Vulnerability Management Support](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-vul-mgmt.html?contentId=VniPUe7f3cDIDUARQAcaEg) - [Zero-day vulnerability tracking](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-zero-vul.html?contentId=fo7JHMIpBgvvfRoXsqQelA) - [Automatic Threat Actor priority tagging](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-threat-actor-priority-tagging.html?contentId=~8Sm5E3amLn_ARZunM0UDg) - [Automated flows tables](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-flows-tables.html?contentId=g6bLFp5hS63wpP4Z23i8UQ) - [Playbooks](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-playbooks-admin.html?contentId=awp4vIKhgHxbhTXiao839w) - [Activate the Threat Hunting Playbook](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-activate-threat-hunt-playbook.html?contentId=wI09Z_6B3FkTH1mq2GgmGw) - [Configure tooltips for nodemaps](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-config-tooltip-nodemaps.html?contentId=aJXH0Uz0EPNjXk~I30nyiQ) - [Configure Custom Event Types for Timeline](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-config-timeline.html?contentId=2UUcR4U8Ja9DBAr4mtzbUw) - [Configure tooltips for nodemaps](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-config-tooltip-nodemaps-d38907e87246.html?contentId=qvi1BK~0b03uTImoFplRjQ) - [Configuring Threat Intelligence External Sharing](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-intel-sharing.html?contentId=5NVKH0nlPz9vqx5IaowA3Q) - [Exploring Outbound Intel Sharing](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-outbound-intel-sharing.html?contentId=crrRrQQRIfHyIP2TvuOuow) - [Configuring Outbound Intel Sharing Controls](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-outbound-sharing.html?contentId=LlCL9fxKzzFKPPDaiypntA) - [Configuring Outbound Intel Data Exclusion Rule](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-outbound-data-exclusion.html?contentId=zT2jclAFdMuzm5lhtA3Lew) - [Configuring Outbound Intel Sharing Profiles](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-outbound-sharing-profiles.html?contentId=AFRsXNIa9QxeAy7XxEDZHQ) - [Configuring Outbound Intel Sharing Groups](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-config-inbound-sharing-groups.html?contentId=cW_tvpRI4lIr5LGHIkZypQ) - [Defining Approval Rule for Outbound Intel](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-approval-outbound-intel.html?contentId=uhWXh3T_~eo8lfBIt~WuKQ) - [Configuring Outbound Intel Sharing Templates](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-intel-sharing-templates.html?contentId=1bTiGZu3jGp4_qlnDhPBEQ) - [Working on the Redaction Library](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-redaction-library.html?contentId=gbr6ljP0PSzeR2iukXY0Vw) - [Bulk Import of Redaction Categories and Values](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-bulk-import-redaction.html?contentId=8vr6ZWMSBqT_yPv396y8eQ) - [Exploring Inbound Intel Sharing](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-inbound-intel-sharing.html?contentId=Iap5QztqlywiNf76uOVITA) - [Configuring Inbound Intel Sharing Profiles](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-config-inbound-profile.html?contentId=9fC8o4aCl4zV85yUaSHU~w) - [Configuring Inbound Intel Sharing Groups](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-config-inbound-groups.html?contentId=dk80N3jjR_NPfsNoWvGbKg) - [Defining Approval Rule for Inbound Intel](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-approval-inbound-intel.html?contentId=aSsgFh9zbsi1g7iTzNcQdQ) - [Exploring TAXII Outbound Server](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-taxii-outbound-server.html?contentId=ny5Lj3aptLTI3wuXZdfW3A) - [Create TAXII Collection](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-create-taxii-collection.html?contentId=SeYQat98Bmd6JRy2NPPhsw) - [Automated Sharing of TAXII Collections](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-automated-share-taxii.html?contentId=oGsrGzpAJyWlM9aCFTuE8w) - [Viewing TAXII Collection Records](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-view-taxii-collection.html?contentId=NGUZFe5~IxEIjm41C6ihPA) - [Viewing Threat Intelligence External Sharing](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-intel-sharing-module.html?contentId=7l2XIq6YxaS7Dq7eZMu8Yw) - [Viewing Outbound Intelligence](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-view-outbound-intel.html?contentId=Tasb1R9k1e~EfsAmMzyanQ) - [Viewing Inbound Intelligence](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-view-inbound-intel.html?contentId=ut67eGczXMtcOa_LW~hwrQ) - [Viewing TAXII Collections](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-view-taxii-collections.html?contentId=cqKEeAFNJjqoQ5YBOfkwDg) - [Share Threat Intelligence data between TISC instances](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-config-sharing-instances.html?contentId=XosGUrx3Nw2xwRhp0fH9bQ) - [Manual and Automated Sharing using flows](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-manual-automated-sharing.html?contentId=jrxEFzEOM50Ls68aoUEhGw) - [Template Configuration for Intelligence Sharing](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-template-config-sharing.html?contentId=_cGZ7fPhXt2h1kd7AoRzuQ) - [Sharing intelligence using TAXII Server](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-sharing-intel-taxii-server.html?contentId=J3Rby4ApCg0DrLP9u9AvXg) - [Sharing of Outbound Intelligence Records from GUI](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-create-intel-records-lib.html?contentId=1coT3qajC_YoWUguTdczKA) - [Add to TAXII Collections from Library List View](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-obs-add-taxii-collects.html?contentId=QDAXb8~Hoow4LTbkXpCvHA) - [Threat Intelligence Sharing Approval Workflow](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-sharing-approval-flow.html?contentId=N2TFVy6ByAVXEFy2pnVP7Q) - [Automated Sharing of Outbound Intelligence Records](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-automated-outbound-intel-share.html?contentId=hoTX6RI5m_e5UxmVVasdqw) - [Viewing Redaction Imports](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-radaction-imports.html?contentId=Oimf53Z6KnoFd4qSsxfXrA) - [View all Redaction Imports](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-view-redaction-imports.html?contentId=UUn4eERDydx7tNkZP~OPoA) - [View my Redaction Imports](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/view-my-redaction-imports.html?contentId=9nwupVWES5jSeC13do9Y8g) - [Reference](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-reference.html?contentId=FkFhdHQz9OkXyAFp5nIN9Q) - [Domain separation and Threat Intelligence Security Center](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-domain-separation.html?contentId=ZoGn8nL7Dlh4KrcYCza8Vw) - [Threat Intelligence Security Center Knowledge Base articles](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-kb-articles.html?contentId=PDa8vIW895wFFsiA1TSk9g) - [TISC API References](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-api-references.html?contentId=VHwk0~geW0qfhK8t4IWxFg) - [Components installed with Threat Intelligence Security Center](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-components-installed.html?contentId=gPP5WACUundPLE5sHWVAdg) - [Use](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/using-tisc.html?contentId=0W3IMSpWP54LzdM7DqNdTA) - [TISC integration with SIR Workspace](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-integration-with-sir-workspace.html?contentId=key4R7FhRh09KTIw7dNIrw) - [Working with Data Imports](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/working-with-data-imports.html?contentId=jcQxvBBEJnVJm9c6ID_cPg) - [Viewing all imports](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/viewing-all-imports.html?contentId=Pc1l0a2ihi5_S2~_hr7Ldw) - [Viewing my imports](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/viewing-my-imports.html?contentId=5wVtFslOEtpIhbicB52MkA) - [Viewing my approvals](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/viewing-my-approvals.html?contentId=5~Ryhnty6oy67NPfLbPs2w) - [Import Intelligence in TISC](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/importing-threat-intelligence.html?contentId=Raw~zLbeg6ulbEX6PFuugQ) - [Import data using structured file](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/import-data-using-structured-file.html?contentId=N74iAZd7pLgLi_vI0RbrfA) - [Import data using standard format](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/import-data-using-standard-format.html?contentId=hWozDGyAJd993~kvY788Og) - [Import data using raw text](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/import-data-using-pasted-text.html?contentId=1Q3N2JSI~rHrIPQsy1n~ZA) - [Import data using unstructured file format](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/import-data-using-unstructured-file.html?contentId=nXEPJZTowgU7a58N26dQVg) - [Import data using AI](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/import-data-using-ai.html?contentId=xuMcBHr4h0Mc1vMtVeH_pQ) - [AI extraction reference](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-ai-extraction-fields.html?contentId=ofM1THsfSNCPsGFzpmoeQg) - [Threat Analyst Workbench](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/threat-analyst-workbench.html?contentId=rxV4yBYa_6dgysUAGBbWdA) - [Workbench Overview](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/workbench-overview.html?contentId=YNdXha6kmmgnool59t5cqw) - [Creating cases using Threat Analyst Workbench](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/create-cases-using-threat-analyst-workbench.html?contentId=EyBxgIv3GXSqa29tpm2aVw) - [Enforced Restrictions for case(s)](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-enforced-restrictions.html?contentId=NhZ8JZEAFIErkMuQb3A9PA) - [Access controls for a case](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-access-controls.html?contentId=GBMFuOiQZ2UR3Z~6f5VDfQ) - [External user access for case tasks](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-external-users-access.html?contentId=sb4lcW30fDZpNcb4MMzDXw) - [Associate MITRE Techniques to a Case](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-associate-mitre-technique.html?contentId=FSSHu_bTezMzeuuZ2QksKA) - [Roll up of MITRE technique associations](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-mitre-roll-up.html?contentId=YcWI3QIxZXD42DiKs1XAQA) - [Summarize a case](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/now-assist-tisc-case-summarization.html?contentId=WEhE8Lr1DW8PaTj~2ZPixg) - [Creating case task using Threat Analyst Workbench](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-create-case-task.html?contentId=ULTTmGJRgX_N6lYALQzqpw) - [Working with Investigation Canvas](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-investigation-canvases.html?contentId=vNGFvMGXdxu5uMuJZK_W_w) - [Working with Actions on the Investigation Canvas](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-canvas-actions.html?contentId=yY2Qdaxf0SkP1o12pFmJxQ) - [Linking an existing case from Investigation Canvas](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-link-existing-case-canvas.html?contentId=B9p8CLRoX58LU9scG9bLpQ) - [Creating a Case and Linking from Investigation Canvas](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-link-case.html?contentId=tasIbrfk459Lfu2Ls4IKDQ) - [Linking Canvas from a Case](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-link-canvas-from-case.html?contentId=M5zWEOjQI8Xh7F~4HiOJAg) - [Creating an investigation canvas](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-create-canvas.html?contentId=nrNnAiqCyp3mKx7Pkk4iIA) - [Adding a new node to the canvas](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-add-node-canvas.html?contentId=nvBKb9Usxq9fCixZrY4Pow) - [Using Timeline in Investigation Canvas](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-timeline-events.html?contentId=l_ZCrCgKxp7t85SETpV76w) - [Adding Timeline Events to the Canvas](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-add-timeline-events.html?contentId=m9ch2AHnnsYpkfPeZv~5Hg) - [Investigation canvas and MITRE ATT&CK](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/investigation-and-mitre.html?contentId=VY4UZgj72RVWSNq6m~AH5w) - [Investigation Canvas MITRE Filters](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-mitre-filters.html?contentId=Sd4KyTkzaX0BfqWkVrj1UQ) - [Add artifacts to cases or case tasks](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/add-artifacts-to-a-case-s.html?contentId=Y9CSYESznuLjLeCewUOEtQ) - [Roll up of MITRE Techniques from Artifacts to Case](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/roll-up-mitre-case.html?contentId=bCXCgejbEv_cBjYK5ecQxQ) - [Show MITRE ATT&CK Framework for a Case(s)](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-show-mitre-fw.html?contentId=SHJV2OlveieU88HRwcgixA) - [Run Enrichment Actions within a case](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/run-enrichment-results.html?contentId=CVVIP6y0IEUxiyk1KQFfzQ) - [Generate a Case Report using generative AI](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/na-tisc-generate-ai-reports.html?contentId=pMOdGBe8Ass7gIpTfX5LZg) - [Generate a Case Report using a template](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/view-case-reports.html?contentId=unzJF9tTFupKaAfr86GUiA) - [Create a security incident from a TISC case](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-create-si-case.html?contentId=rsK0rZM9O4clXW1MxhKdTg) - [Upload Secure File Attachments](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/secure-file-attachments.html?contentId=qpoh5TFa5WDgYg~FskLDeA) - [Using playbooks](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-playbooks-analyst.html?contentId=TTi0xqxVGRYsEAeeEo_rFg) - [Threat Hunting Playbook](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-threat-hunt-playbook.html?contentId=ZiCzTR6TWweQ7nCb_YYyhw) - [Use the Threat Hunting Playbook](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-use-threat-hunt-playbook.html?contentId=p4UAnLK7SWyNrcUgealaFg) - [Add the Threat Hunting Playbook to a Case](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-add-playbook-manually.html?contentId=hmVZuWxlQXayT7efDJL6BA) - [Threat Intel Library](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/threat-intelligence-security-center-library.html?contentId=3iG7bzXXnX9gbrpVF8BRZg) - [TISC Data Model](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/understanding-the-data-model.html?contentId=x9FtYIWttNml8MkTJZHD_A) - [TISC Library Objects form view](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-library-home-page-view.html?contentId=6mQ7NfSSVUMB2SxnfbCYtg) - [TISC Library Repository](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-ioc.html?contentId=X0xkIjNYmDvGZamAVtcjJQ) - [Observables](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/observables.html?contentId=KDbjnBQdkp_asERrmrzzlA) - [Define an Observable](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-an-observable.html?contentId=0aiKghJZ2w9a~r0bIyX3~A) - [Observables source records](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-observables-source-records.html?contentId=itzlArxhF3GSULgWeSz9_A) - [Link Threat Intel Related Records](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/link-threat-intel-releated-records.html?contentId=4wIXZ_mH_GXUUkT4iC6GBQ) - [Create a related record to link](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-create-new-related-record.html?contentId=Zs6CGMRG38twIM0oLRCvWw) - [Fetch Observables Data](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/fetch-observables-data.html?contentId=3nfe6jEimMa4R3TaaBZ48g) - [View details in Visualizer](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/objects-visualizer.html?contentId=LA6LoP2mPnvbUoTtZRNcIg) - [Link nodes in the Relationship Graph](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-link-nodes.html?contentId=dJoajadzBZePEsk2mHAhLA) - [Working with Internal Intelligence Records](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/working-with-ti-internal-intelligence-records.html?contentId=3d1Slip0fEV2_1U7vPfesA) - [View Internal Intelligence Records](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/view-internal-intelligence-records.html?contentId=oU4wf2QTxTMWy0cBJ9dcKw) - [Run Enrichment Actions from Observable](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/run-enrichment-actions-from-observable.html?contentId=YAzPJ3yrFmhRL7QvgNTtaQ) - [Add to Case](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/add-to-case.html?contentId=jm5WWKpZqCinZAnkx~VHgQ) - [Run Enrichment operations in TISC](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-unified-experience-capabilities-and-modal-screens.html?contentId=fX8lw6evrJAlm~x~048h6A) - [Observable Enrichment](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-observable-enrichment.html?contentId=lc~oaHc2m484OPbmIjQUMA) - [Run Have I Been Pwned enrichment integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-hibp-enrichment-integration.html?contentId=Ei2LLsCFei4twZrN2CyO8A) - [Whois integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-whoisxml-integration-d38907e90935.html?contentId=aAefKbhv3Bom8PyAY0x_rw) - [Configure and enable Whois integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-whoisxml-api-integration-d38907e90970.html?contentId=UZlkP_JiiDm0e1VrsJpclw) - [Shodan integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-shodan-d38907e91005.html?contentId=uJF4EV53WHPKSjdQkpTSOw) - [Configure and enable Shodan integration](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/shodan-integration-d38907e91040.html?contentId=eIama94Rv6fkCAzVpjY5HA) - [Run Threat Lookup](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-run-threat-lookup.html?contentId=VXqQoGbsLiIKq5AIXQMUFg) - [Run Sighting Search](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-run-sighting-search.html?contentId=8hO_apRFLPtYaE1FahZYEg) - [Run Observable Enrichment](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-run-observable-enrichment.html?contentId=s549MYRe70prW9cadOSGFg) - [View Enrichment Results](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-view-enrichment-results.html?contentId=dCIkcjHc2JYbCnQ3E2YDPA) - [Indicators](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/indicator.html?contentId=mM3OjGWJEfH_mLP_ruqXTA) - [Define an Indicator](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-an-indicator.html?contentId=Tb6NiYeJKUHUl2jDnYc3Eg) - [Observable extraction from indicator patterns](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-extract-observables-from-indicators.html?contentId=I3naLjKFjlPpF2TKIxGeEw) - [Threat Entities](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-threat-entities.html?contentId=13rUehl7qpT5JlKe1SJmkQ) - [Attack Patterns](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-attack-patterns.html?contentId=F3bSNON0NX~aTQSLfu9hSQ) - [Define an attack pattern](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-define-an-attack-pattern.html?contentId=P6cUm4BvoXQsGUbhTqwB9Q) - [Campaign](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/campaign.html?contentId=hv2KT4KHqMAH1_3ApPvIEg) - [Define Campaign](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-define-campaign.html?contentId=7rO_6Vin6qzLOrkE5VSnAQ) - [Courses of Action](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/course-of-action.html?contentId=oNc2wpDxtF1GQkgEJyADQg) - [Define Courses of Action](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-course-of-action.html?contentId=Jtd7U6bzgU~2AgxLXuBDKA) - [Identity](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/identity.html?contentId=sE3y53CBlINhFoAeOQnm3A) - [Define identities](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-identity.html?contentId=5vMyqr3GeViM66n1i3V4pA) - [Infrastructure](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/infrastructure.html?contentId=OXBQBLJc4ylFWHj0Dgtvmg) - [Define infrastructure](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-define-infrastructure.html?contentId=vLHQwFb0csSY5yz4NZHSig) - [Intrusion Set](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/intrusion-set.html?contentId=4FVF~veXjCntdiLIG0EcsQ) - [Define Intrusion Set](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-define-intrusion-set.html?contentId=27LYVGdUMu2BVuPrFDRRuA) - [Location](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/location.html?contentId=xcToIGEWt33M_69sHpwypQ) - [Define Location](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-define-location.html?contentId=DvHBTMhcUy9TJkZ8QKfuPw) - [Malware](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/malware.html?contentId=9QppwSs3Rv33l1Oi3WZ0FQ) - [Define Malware](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-define-malware.html?contentId=ldOY7r3p9QWWrx1QBuuDbg) - [Malware Analysis](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/malware-analysis.html?contentId=a90fQY1qVwAap5oqI49RMQ) - [Define Malware Analysis](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-define-malware-analysis.html?contentId=N4ETpk4q8yaiR1cgHKGmbQ) - [Marking Definition](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/marking-definition.html?contentId=HN2~eQ3QErsy_jJwcLlZ7g) - [Define Marking Definition](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-market-definition.html?contentId=~NMrPQzl6GYgXDx5yEGI5A) - [Object Sighting](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/object-sighting.html?contentId=onibC97kNiDwM1iXm~rBOQ) - [Define Object Sighting](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-object-sighting.html?contentId=wHlBVSi8~E11HzR~YGRCyw) - [Observed Data](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-observed-data.html?contentId=6KdRtF16e02~fuztYT5Qtg) - [Define Observed Data](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-observed-data.html?contentId=tavBTvqcKsB_mATzvvIJSQ) - [Threat Actor](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/threat-actor.html?contentId=0x~4cwBG3DBRRVFIlh4Dwg) - [Define Threat Actor](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-threat-actor.html?contentId=~yuoAv63uIJO0UVgfZEiCg) - [Threat Event](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/threat-event.html?contentId=DGoVVtPoSwcsOTtm1Rbmww) - [Define Threat Event](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-threat-event.html?contentId=QgMwVp~1OUUAxhkZzN6g5w) - [Threat Grouping](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/threat-grouping.html?contentId=MbdsazL1sz2boDVtcN6xKg) - [Define Threat Grouping](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-threat-grouping.html?contentId=lfLxAmxp_e6EeHy2wjcVIg) - [Threat Note](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/threat-note.html?contentId=lGaHs77~hXhlDO1~QBBkMA) - [Define Threat Note](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-threat-note.html?contentId=Hdw~7NNTz61xkriGBIHxeA) - [Threat Opinion](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/threat-opinion.html?contentId=J1YnkihhudpRDCuu8S6cPg) - [Define Threat Opinion](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-threat-opinion.html?contentId=DwXnPkYwSIt19CW2OW8l_Q) - [Threat Report](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/threat-report.html?contentId=e36UqLy_zlZPVlvrc34Blw) - [Define Threat Report](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-threat-report.html?contentId=1xVgr8GZ_rU4khMeO~MoyQ) - [Tools](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tool.html?contentId=4VgfYn4C2Dh9yI_asMKVAg) - [Define Tools](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-tool.html?contentId=81uBe17KuKPnZ9YXUirEfg) - [Other Objects](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-other-objects.html?contentId=i3xYCxJSYQxhGuPwh6hRjw) - [Data Component](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/data-component.html?contentId=T_mkXSIcZGGsGK0XSBxF_w) - [Define Data Component](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-data-component.html?contentId=XUDbHr2EZghZdaFNomTwkQ) - [Data Sources](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/data-sources.html?contentId=n0Bm3js5Pfo_sxgB9VDIqw) - [Define Data Sources](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-data-sources.html?contentId=G4_V1xSsAQ1nEj8MKDAOSQ) - [Vulnerability Artifacts](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/vulnerability.html?contentId=~KMwz1MGHyzD~su~VpXv2w) - [Define Vulnerability](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-vulnerability.html?contentId=Ha1SoKspLWN61da0F15MRQ) - [Create a CWE record](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-create-cwe-record.html?contentId=1RDNnMalZhZPQutq~8Fa9w) - [Create a Product](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-create-product.html?contentId=r45_vnJbNlZIjuOPvr2Qzg) - [Create a Vendor](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-add-vendor-to-vul.html?contentId=AVg5TsPlNsUxVmdOy_8k8A) - [Create Remediations](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-create-remediation-record.html?contentId=MrsaKDVdyo8Vp81SQRlU_g) - [Access the Vulnerability Entities](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/access-the-vulnerability-entities.html?contentId=1B3mNAAYli2qnc3gO9LezA) - [Fetch Vulnerability Data](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/fetch-vulnerability-data.html?contentId=FfeF7HcC9ImBzn9sOiWZuQ) - [View RSS Feeds](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-rss-feeds.html?contentId=Ng9q2_is2CwavTqEbZL~8A) - [Working with Reports in TISC](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-reports-lib-view.html?contentId=riCvtRcd0jkCHCd2kgGWOw) - [View All Reports](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-reports.html?contentId=0~8pDBwmYhu_riGGB5fcXA) - [View Case Reports](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-case-reports.html?contentId=Dh78GPrFhi8wJ8URwO9DNg) - [Create Case Reports](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-create-case-report.html?contentId=UbZ9b9y5kWhNiqWP2pttXA) - [Create a Case Report using generative AI](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-create-case-report-ai.html?contentId=sqIQNm7uEzA~EZVVhM7bWA) - [Create a Case Report using a template](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-create-case-report-template.html?contentId=MGg0pADv4xs2AjWe4JHNFg) - [View Intelligence Reports](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-view-intel-reports.html?contentId=bBoha7SCDEUHKUu8fKcNdA) - [Create an intelligence report](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-create-intelligence-report.html?contentId=nXAOtrfGamGgMQgxyeu8vA) - [View my reports](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-view-my-reports.html?contentId=V0n3PyyRqZzTPq6tm1i6eg) - [MITRE-ATT&CK repository](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-mitre-att-ck-framework-overview.html?contentId=dzQJDhpnOD8l6fAmWwCxVg) - [Manage Matrices](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-manage-matrices.html?contentId=tYnENGbjS9c_oNA9LhwJAA) - [Manage Techniques](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-manage-techniques.html?contentId=Tq0QclrX0SpBuDeuIu7LbA) - [Review revoked pairs](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-review-revoked-mitre-associations.html?contentId=271GsUDsH2FzQ7UwMNSMIA) - [Revoked MITRE tactic-technique field reference](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-mitre-revoked-review-fields.html?contentId=u4PHUAxZ642shF03lvfOuQ) - [Manage Mitigations](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-manage-mitigations.html?contentId=iEW~alqEWnzO6d~skcdHsA) - [Manage Groups](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-manage-groups.html?contentId=kka9G5UNEyYoYsBvf2AB0Q) - [Manage Malware](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-manage-malware.html?contentId=iYzmHVXrmuqjsfDGq_GjyQ) - [Manage Tools](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-mitre-manage-tools.html?contentId=BMmvbwidiCI3cnYZTH7esQ) - [Manage MITRE Relationships](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-mitre-manage-relationships.html?contentId=Xp40X78s~gZA1~QnFkEAzw) - [Relationships Objects](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/relationship-objects.html?contentId=DzYEEPBYRQ~GSrW~8XteAg) - [Define observable-observable relationships](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-observable-observable.html?contentId=rKmS5_Qh2SHxcusuIFvmCg) - [Define object-object relationships](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-object-object-relationships.html?contentId=O0NXoEBKAUNTn7ADviMs2Q) - [Define object-observable relationships](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-object-observable-relationships.html?contentId=RzBZ0XV5YWG1IjkE59kxXQ) - [Define object-indicator relationships](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-object-indicator-relationships.html?contentId=R6KVKi3gIHQDbc4i7BrcNg) - [Define indicator-indicator relationships](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-indicator-indicator-relationships.html?contentId=6AMGczBlbTXByQ25wJn0Vg) - [Potential Relationships](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/potential-relationships.html?contentId=YqK1u_LzUkuhNdVIJpO7~g) - [Confirm observable-observable potential relationship](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-observable-observable-potential-relationship.html?contentId=eXRdtAC7eMKs4trtH_iDmQ) - [Confirm object-object potential relationships](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-object-object-potential-relationships.html?contentId=yEiCwFHG9SYf6eHG5bymeA) - [Confirm indicator-indicator potential relationships](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/define-indicator-indicator-potential-relationships.html?contentId=Fyd48izeWna2wWXKdA7vXQ) - [Vulnerability relationship mapping](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-vul-relationship-map.html?contentId=q2uC_d6AMpfExofPtmpaFA) - [Access Vulnerability Downstream actions](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/downstream-actions-from-the-vulnerability-form-view.html?contentId=0oirfqdHSmKo8ApxHq6okw) - [Create Vulnerability Assessment from a Vulnerability](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-vul-assess.html?contentId=jNV95bIUvn_Gex6zHl0YKQ) - [Create Security Incident from a Vulnerability Record](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-create-security-incident.html?contentId=NBFGN7wW~R8ogUk3ZGmW2Q) - [Deleting threat intelligence library records](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-delete-lib-records.html?contentId=KOshXBheTl6~ENHBHwZEKg) - [Export intelligence data](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-export-observables.html?contentId=KDCaZyvfj9tfhO1IiRKkAw) - [Confirm Potential Relationships from Related Records](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/confirm-potential-relationships.html?contentId=fV7f0BkY8J198zonqXq5wg) - [Automated correlation](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/automated-correlation-rules.html?contentId=v4iSTu~lX_wSUOkakVSvkA) - [Configure correlation rules](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/configure-correlation-rules.html?contentId=ZuaVKWnxcWsstu_r2YlDpg) - [Configure potential relationship table limits](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-update-potential-relationship-record-limit.html?contentId=qo75qusoRFCcuheOubU8RQ) - [Working with Data Exports](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-data-exports.html?contentId=7ceFHfaYXWu3FaXX_srStQ) - [View all exports](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-all-exports.html?contentId=YO8enCRXprCviOT6FWNY6A) - [View my exports](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-view-my-exports.html?contentId=zN~uO160Q6xZxI32rN6Aag) - [Export intelligence system properties](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-export-threat-intell.html?contentId=Oj9PuyuwXKULK97e2vP~dQ) - [Data migration in TISC](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-data-migration.html?contentId=czav9HQw4Sor1oYXU7NHcg) - [Data migration from SIR TI to TISC](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-data-migration-job-config.html?contentId=ksLzC6~ENR2OyTDcJO2gPQ) - [TISC Data Processing Functional Flow](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-data-processing-functional-flow.html?contentId=uG136EkSyMjaJ_x1IllYNw) - [TISC Data archival and cleanup](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/data-archival-process.html?contentId=j6zxiQu1dpiETnuElKwL0A) - [TISC Data Archival](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-data-archival.html?contentId=_6PqPHwBzOMv28FDzzMzKw) - [Archive TISC related records](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-releated-records.html?contentId=xl~JngawZ0boOJVIeQ11sg) - [Destroy Rules in TISC](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-destroy-rules.html?contentId=gfSzc4Ax4RKRSVwRAYSo3A) - [Delete intelligence records](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/remove-intelligence-records.html?contentId=YiLRyWSKoOC8VvA_r6jRyw) - [Automated cleanup of duplicate records from same source](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/duplicate-handling-of-records-from-the-same-source.html?contentId=st2lUBFu5QBvEyHr59OVxg) - [Data Loss Prevention Incident Response](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/dlp-landing.html?contentId=JlwboEPtHrJASruaynzXSA) - [Explore](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/exploring-dlp.html?contentId=mPBkj1hAJE0wxDxyEh~YRw) - [DLP Incident Response overview](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/understanding-data-loss-prevention.html?contentId=PFd~bkjfMFJQsfBmP9DuTQ) - [Get started with DLP Incident Response](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/get-started-with-dlp.html?contentId=lnRY83yTxgpsuKYEtvOZNg) - [Configure](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/install-dlp.html?contentId=7_F_gkIU6NGZR_AKizC9xg) - [Install and configure the DLP Incident Response application](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/install-data-loss-prevention.html?contentId=hAQWHxlFXG3nAO4iP7El4A) - [Domain separation and DLP Incident Response](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/domain-separation-and-dlp.html?contentId=Fmw36GSaiAHzAu4MFR8w8w) - [Administer](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/data-loss-prevention-administration.html?contentId=tiqsRx0aRnodSlpITAPOhQ) - [DLP default configuration settings](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/configure-data-loss-prevention.html?contentId=gzGpo3wAJeSUfhBf7jwIUA) - [Create end user lookup rules](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/configure-enduser-lookup-rules.html?contentId=C_CgNgUi5Z_pBQfpIlPjsw) - [Create assignment rules](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/create-assignment-rules.html?contentId=1xYKAYxtkKDfFdVA3en~oQ) - [Create incident consolidation rules](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/configure-incident-consolidation-rules-to-consolidate-your-dlp-incidents.html?contentId=Cfvxt2yBKvGkQgsnRhQZ_A) - [Create response due date rules](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/setup-response-due-date-rules.html?contentId=FyASYDbr4YKUoT1t~08unQ) - [Add multiple users to access DLP incidents](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/add-multiple-users-to-access-dlp-incidents.html?contentId=5gcnKALyudiGLF5xsAFr6w) - [Create Approval Rules](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/configure-approval-rules.html?contentId=tXtUG8LtR0Pzmg9fXCG2SQ) - [Create user instructions templates](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/create-and-manage-user-instructions-template-for-dlp-incidents.html?contentId=Y_WFk3IXocad6LOsKbiP7A) - [Configure DLP UI user instructions](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/configure-dlp-ui-user-instructions.html?contentId=7OUP4Tuxbq5SMhIWB_0eJw) - [Create email templates](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/create-and-manage-email-templates.html?contentId=Ev7ySWNe95LgGWC~~WLECg) - [Create a Data Loss Prevention Incident Response SLA trigger](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/sla-records.html?contentId=5P30QhDS8USUHv4XhZyyWQ) - [Create a Data Loss Prevention Incident Response SLA definition](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/dlp-sla-definitions.html?contentId=c31hwsR_QAlIV1fJwZegyw) - [Create assessments](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/create-and-manage-assessments-for-dlp-incidents.html?contentId=TcuAVmB50FDHju0O81r_XQ) - [Configure response option for your DLP incidents](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/configure-response-option-mapping.html?contentId=1IFAbpmRSxTIGgcC8IPfcw) - [Create incident response option rules](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/configure-end-user-action.html?contentId=GqXNpStNmLtahUmtXOnckg) - [Create age chart configurations](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/configure-age-chart.html?contentId=uqy8oRg05hGu4av_h1SpFw) - [Create user delegate configurations](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/configure-delegation.html?contentId=RbvnIPSo2P6K5l5Qw3gZeQ) - [Create repeat offender identification rules](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/repeat-offender-identification-rules.html?contentId=KRds7eMs3FmYybueb9lGTg) - [Create Additional Incident Data Fields](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/create-custom-fields-dlp.html?contentId=NGs~ZTKA4g63N5pQyNxXIQ) - [DLP SLA Definition form](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/dlp-sla-def-properties.html?contentId=YWbH~guycN7fJv5DvHeiQA) - [Configure advanced settings](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/configure-advanced-settings-dlp.html?contentId=BQmBvKXHbQlZrApJrlXrrw) - [Monitor DLP Integration Run process](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/configure-microsoft-dlp-integration-run-process.html?contentId=K5G87odkCBKnx6IWFr8Jew) - [DLP Incident Access Restrictions](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/dlp-incident-access-restrictions.html?contentId=Efl4tC0Ae9v~4a_LCgsSsg) - [Create field level restrictions](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/setup-field-level-restrictions-dlp.html?contentId=SINRTtW4Gu6TimyyFFi6IQ) - [Create record level restrictions](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/setup-record-level-restrictions.html?contentId=9CKckBzTlpxAj8cIm7wteg) - [DLP Incidents Archival](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/dlp-archiving-rule.html?contentId=zHKoABVxyJruDPcofSBgcQ) - [Archive DLP related records](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/archive-dlp-related-records.html?contentId=qXBcnasHCaH1ZfiyXfK7WQ) - [Manage incidents](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/data-loss-prevention-incident-management.html?contentId=k~OBahb7_xWw1Hdg9CP4Mw) - [Data Loss Prevention Incident Response User Workspace](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/using-dlp-end-user-portal.html?contentId=M1txhAtJIf7vNZhB8nGRWA) - [Report or respond to DLP incidents](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/access-the-dlp-end-user-portal.html?contentId=wcTuWCjSDD3nu_h1PMP8fQ) - [Working with my approvals module](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/working-with-my-approvals-module.html?contentId=ECf2gx0dqsyYo~xt9PPGPQ) - [Data Loss Prevention Incident Response Analyst Workspace](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/using-dlp-ops-portal.html?contentId=Gt6GaZI2CJa9Utz5OqZHEg) - [Data Loss Prevention Incident Response Dashboard](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/using-dlp-dashboard.html?contentId=ORoEDYL1Wq_ajHbi8~gtug) - [Inbound integration](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/inbound-integration-dlp.html?contentId=Kf70Q3XS8Nk5iMHTl2li7Q) - [Integrate](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/dlp-integrations.html?contentId=tEvgoYYSoOe7ClxXIhOHGQ) - [Symantec Integration for Data Loss Prevention Incident Response](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/symantec-dlp-integration.html?contentId=w2NTMf~HOvc2yXqYtdgDdA) - [Getting started with Symantec DLP integration for Data Loss Prevention](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/getting-started-symantec-dlp-integration-dlp.html?contentId=3GF5_FHfPZ2i7YzCVlzO1A) - [Install and configure the Symantec DLP integration for Data Loss Prevention](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/install-configure-symantec-dlp-integration.html?contentId=sC0EAuxVfxt1sXFcFbD9WQ) - [Create a profile for Symantec DLP integration](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/create-profile-symantec-dlp.html?contentId=GAIqro2s37uTuNKPwBv8yw) - [Define filters to apply for the Incident creation](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/define-filters-symantec.html?contentId=u6XrfOdZagMtc2vqE1ZAzQ) - [Configure evidence file storage](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/config-evidence-file.html?contentId=tWOF8ggf9Ge0CSJFWUmywQ) - [Download evidence files](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/download-evidence-files.html?contentId=lIIZiOv1JK4NMvzg92M1Iw) - [Preview evidence files](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/preview-file-symantec.html?contentId=ZbAJD4DQWvzWIdDo~qiBQA) - [Schedule the Symantec DLP Incident Retrieval](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/schedule-dlp-incident-retrieval.html?contentId=GdC5fgTo31ixMB~7HyPlTQ) - [Mapping Symantec DLP incident statuses with ServiceNow incident Status](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/map-symantec-dlp.html?contentId=qXyx3PjA2CbcCu2AuoJOEQ) - [Severity mapping between Symantec DLP incidents with ServiceNow incidents](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/severity-mapping.html?contentId=uD0Y5lc9BRV3zWhNYsFKzA) - [Configure Smart Response Rules](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/config-smart-response-rules.html?contentId=gSJ5ESOTmQsX6mm6jUvgNQ) - [Execute Smart Response Rules](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/execute-smart-response-rules.html?contentId=nFIO5SpH~O~AP1RutGrZMA) - [Configure the Symantec DLP  integration settings](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/modify-symantec-dlp-system-properties.html?contentId=AcLieIY3ER1xyt1hKlbkYA) - [Domain Separation in the Symantec DLP integration](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/domain-seperation-symantec-dlp-integration.html?contentId=NnjwN7ASINWu38hhBO8wFQ) - [Data Loss Prevention Incident Response Integration with Proofpoint](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/dlp-incident-response-integration-proofpoint.html?contentId=W2FJ56Hl6mHRRGv5DjgaBA) - [Getting started with Proofpoint integration for Data Loss Prevention](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/getting-started-with-proofpoint-integration-dlp.html?contentId=7FopQdv7NByOE~ETQQ0XJQ) - [Install and configure the Proofpoint integration for Data Loss Prevention](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/install-configure-proofpoint-integration-dlp.html?contentId=DKw6rmzZVjokarcYyOmd~A) - [Configure the Webhook on the Proofpoint DLP tenant for alert notifications to ServiceNow](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/configure-webhook-proofpoint-tenant-alert-notifications.html?contentId=oW_bqRfOSVjNxVgVEDB7MQ) - [Create an Application in Proofpoint and Obtain Client Credentials](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/create-application-proofpoint-dlp.html?contentId=ZqBKNiPxGw6NATGm6KN5cg) - [Create a Profile for Proofpoint DLP integration](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/create-profile-proofpoint-dlp-integration.html?contentId=0wGaBd17FnYIX2fOw8rPKQ) - [Define filters to apply for the Incident creation](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/define-filters-incident-creation-proofpoint.html?contentId=l0CE79eBU6mdGy1vGajxdg) - [Preview evidence files](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/preview-file-proofpoint.html?contentId=i_UhnkkkqGGMhQOAmZpSBA) - [Map Proofpoint DLP incidents status with ServiceNow incident status](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/map-proofpoint-dlp-incident-status.html?contentId=A5J9DhPLjHqVoXfsNSsfWw) - [Configure Proofpoint DLP integration settings](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/configure-proofpoint-dlp-integration-settings.html?contentId=vYUD~H2EoND~JHaVA8P5nA) - [Domain Separation in Proofpoint DLP integration](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/domain-separation-proofpoint-dlp-integration.html?contentId=ew8SixIrb3EfhaFIu_YqbQ) - [Data Loss Prevention Incident Response Integration with Netskope](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/dlp-incident-response-integration-netskope.html?contentId=gGZdRUGskPZLkdlqHuEBNg) - [Getting started with Netskope DLP integration for Data Loss Prevention](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/getting-started-netskope-dlp-integration.html?contentId=SvHVcVZfdTbazzekOaU_6w) - [Install and configure the Netskope DLP integration for Data Loss Prevention](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/install-configure-netskope-dlp-integration.html?contentId=Hxiu2JG4jbzIEx8oPf1lTg) - [Create a Profile for Netskope DLP integration](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/create-profile-netskope-dlp-integration.html?contentId=aEopWMGccA5mlnf2qswwvw) - [Define Filters to apply for the Incident creation](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/define-filters-incident-creation-netskope.html?contentId=OU858sNIm87JNRhFBM0PZg) - [Schedule the Netskope DLP incidents retrieval](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/schedule-netskope-dlp-alerts-retrieval.html?contentId=KK004iHN55D55jn1nJQgTg) - [Mapping DLP incident status with Netskope](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/map-incident-status.html?contentId=1WaIuHqr74DCg_xvqANTWA) - [Configure Netskope DLP integration settings](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/configure-netskope-dlp-integration-settings.html?contentId=kPi1dLoR~Icz4zTPh91mBQ) - [Download evidence files](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/download-files-netskope.html?contentId=lyzl6mjoaAxU_ZnhQEiw3A) - [Preview evidence files](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/preview-files-netskope.html?contentId=KPzhAw_CaPa1kpu4jylHQQ) - [Notifications for users on retry mechanism](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/notifications-retry-limit.html?contentId=idzwZKrWTXcITMuNfeeRrg) - [Email notifications on credential expiration](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/notification-users-credential-expiration.html?contentId=E4PwSHAN1GjQ1JXe_2nT1w) - [Domain Separation in Netskope DLP integration](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/domain-separation-netskope-dlp-integration.html?contentId=JqOZfRWPzDTy6H897L~GWA) - [Internet Content Adaption Protocol (ICAP) integration for DLP IR](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/icap-dlp-integration.html?contentId=hwSgWaTwrgqewjafwZuzFg) - [Getting started with ICAP DLP integration for Data Loss Prevention](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/getting-started-icap-integration.html?contentId=fbXiO9zcUM5AJjEcK1jDWA) - [Install and configure the ICAP DLP integration](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/install-icap-dlp-integration.html?contentId=5~HwJGmtyd2qvSPOLonEBQ) - [Create a profile for ICAP DLP integration](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/create-profile-for-icap.html?contentId=YFhLc88cL~kFRoY7j7TuaA) - [Define filters to apply for the Incident creation](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/define-filters-for-incidents.html?contentId=by5NHfUEZntTvgfQ_z~PuQ) - [Schedule the ICAP DLP incidents retrieval](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/schedule-icap-dlp-incidents-retrieval.html?contentId=1I3P9pldBh6sZpe~LRj5IQ) - [View sensitive information for DLP alerts](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/view-match-content.html?contentId=~gvxtInkzADFUTtw6B1naA) - [Download evidence files for DLP alerts](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/download-icap-evidence-files.html?contentId=AubVzPyUx53vx~vg06626A) - [Preview evidence files for ICAP](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/preview-file-icap.html?contentId=wWaz9IhXeXFpe4RtUxyhTQ) - [Review the ICAP DLP integration settings](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/review-the-icap-dlp-integration-settings.html?contentId=Bjd6CWOpo6P28gCkTUvBng) - [Data Loss Prevention Incident Response with Microsoft](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/dlp-integration-microsoft.html?contentId=MbfECuQSjFvAdpWsQdAzeA) - [Getting started with Microsoft DLP IR integration for data loss prevention](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/getting-started-microsoft-integration.html?contentId=IOXF309aUDngJhlayrMpeA) - [Install and configure the Microsoft DLP integration](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/install-configure-microsoft-dlp-integration.html?contentId=A94k4P3KSi5L4Ajb2azHzA) - [Create a new incident profile for Microsoft DLP integration](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/create-profile-microsoft-dlp-integration.html?contentId=PbsnBRkFXv6JaRHNXTd2Wg) - [Microsoft purview endpoint storage configuration](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/microsoft-purview-endpoint.html?contentId=RfN4IsDQjzHS3EX05vv1yQ) - [Define filters to apply for the Incident creation](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/define-filters-profile-microsoft.html?contentId=I9hP~u3DLEoKKXclZN8ZeA) - [Configure the match content for the incident](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/matching-content-configuration-microsoft.html?contentId=7XCHNdNdfXI7C_h43KEs8g) - [Schedule the DLP IR Microsoft incident retrieval](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/schedule-profile-microsoft.html?contentId=E8d9LVu0EEjwGOo2568Mtw) - [Configure Microsoft DLP IR integration settings](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/configure-microsoft-integration-settings.html?contentId=wYLw3FkFI6vIaubA55FjBQ) - [Request release email from quarantine](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/request-email-from-quarantine.html?contentId=n_mfgpz8jVEQnpbvKOHf5g) - [Download files for DLP incidents of type Exchange Online, OneDrive, and SharePoint](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/download-file-dlp-microsoft.html?contentId=PWU0YBGnkbNqHWjWzP14ag) - [Preview Evidence files for DLP incidents of type Exchange Online, OneDrive, and SharePoint](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/preview-file-dlp-microsoft.html?contentId=SuVMLLIZRxLZLsQq6LFnsQ) - [Domain separation in Microsoft DLP integration](https://www.servicenow.com/docs/r/security-management/data-loss-prevention/domain-separation-microsoft-dlp.html?contentId=OU07AdfmSTZJQcnLrLYjCg) - [Security Operations common functionality](https://www.servicenow.com/docs/r/security-management/sec-ops-common-functionality.html?contentId=l9GR0~Ac_xwqsbc7TcAF6Q) - [Create and define filter groups in Security Operations](https://www.servicenow.com/docs/r/security-management/create-filter-group.html?contentId=atXP4JLhuofI3LxPxTuHxQ) - [Shared data transformation](https://www.servicenow.com/docs/r/security-management/shared-data-transformation.html?contentId=vqphWaxWUuqMu7nJiHhPvw) - [Create duplication rules in Security Operations](https://www.servicenow.com/docs/r/security-management/create-duplication-rules.html?contentId=1~nHUscgdRbGgSYTrzhqzg) - [Security Operations email processing](https://www.servicenow.com/docs/r/security-management/email-processing.html?contentId=VZuUzjftu50JvpWQwnFz9Q) - [Security Operations email properties](https://www.servicenow.com/docs/r/security-management/email-properties.html?contentId=FkQWiAqBihRpNdHBpAmTxg) - [Create Security Operations email properties](https://www.servicenow.com/docs/r/security-management/create-email-properties.html?contentId=nfZy~6zhO2IsRmBsWJBFSQ) - [Security Operations email parsing](https://www.servicenow.com/docs/r/security-management/email-parsing.html?contentId=gpyAvI_0HoDHraHb2ImQSQ) - [Create email parsers in Security Operations](https://www.servicenow.com/docs/r/security-management/parsing-emails.html?contentId=tw5YOfBKq674s_7kEOgq3Q) - [Edit email records in Security Operations](https://www.servicenow.com/docs/r/security-management/edit-email-records.html?contentId=rM4TZdFKLuYSGJnmJfWudA) - [Unmatched Security Operations email events](https://www.servicenow.com/docs/r/security-management/umatched-emails.html?contentId=saV1BJdLVw~UBnIumB_01w) - [View and reprocess unmatched Security Operations emails](https://www.servicenow.com/docs/r/security-management/viewing-reprocessing-unmatched-emails.html?contentId=aXAJEnp_ICgRS_xmgIPMpw) - [Security Operations field mapping](https://www.servicenow.com/docs/r/security-management/field-mapping.html?contentId=yg4onIvfbs1JBI3PcvCJvQ) - [Map tables to tables with Security Operations field mapping](https://www.servicenow.com/docs/r/security-management/create-field-mapping.html?contentId=n9NxWfazykwpXfo0HWd_pg) - [Security Operations field value transforms](https://www.servicenow.com/docs/r/security-management/field-value-transforms.html?contentId=WL99Oyg2n0qPbs0KrA1dJA) - [Create Security Operations field value transforms](https://www.servicenow.com/docs/r/security-management/create-field-value-transforms.html?contentId=1iQXTaj7aL8USE4pmINktg) - [Security Operations enrichment data mapping](https://www.servicenow.com/docs/r/security-management/enrichment-data-mapping.html?contentId=Rn9gQdHX27MIwhloORQzSg) - [Create a Security Operations enrichment data map](https://www.servicenow.com/docs/r/security-management/create-enrichment-data-map.html?contentId=60boHpmr4iJFP5PynFBJyA) - [Security Operations user-defined escalation](https://www.servicenow.com/docs/r/security-management/user-defined-escalation.html?contentId=wmjcWaOLMkSwEg8xh_cMjg) - [Create a Security Operations user-defined escalation group](https://www.servicenow.com/docs/r/security-management/create-user-defined-escalation-group.html?contentId=Iyo_gulOXJzt0ftAse~m8Q) - [Create domain-separated property overrides](https://www.servicenow.com/docs/r/security-management/create-dom-sep-prop-overrides.html?contentId=j4yJbodbtHTlSnetCqDRtQ) - [Create an operating system group](https://www.servicenow.com/docs/r/security-management/create-new-os-group.html?contentId=Z8Ga~8djN2gQ4mmDCYd4lA) - [Set up security tag groups and tags](https://www.servicenow.com/docs/r/security-management/create-class-group-and-tags.html?contentId=7ziw4ufECUyYkpBtwpBuLQ) - [Create security tag rules](https://www.servicenow.com/docs/r/security-management/create-security-tag-rules.html?contentId=qrD6pur4cWEd5tnK3HXGkQ) - [Import security tag rules](https://www.servicenow.com/docs/r/security-management/import-security-tag-rules.html?contentId=uS7FwSJ0dw__dNYfudCjcg) - [Security annotations](https://www.servicenow.com/docs/r/security-management/security-annotations.html?contentId=wrNfD48dlm8_8VjN3wD9lw) - [Create security annotations for CIs](https://www.servicenow.com/docs/r/security-management/create-security-annotations.html?contentId=RkSFz7CWS4H_3Vk17r5sFA) - [Create security annotations for observables](https://www.servicenow.com/docs/r/security-management/create-security-annotations-multiple.html?contentId=IHM3GrOCCLDNfE8L25hzGQ) - [Create security annotations for users](https://www.servicenow.com/docs/r/security-management/create-multi-sec-annotations-for-users.html?contentId=6_qoe4uXo8N_JV30orsGkw) - [View security annotations reports](https://www.servicenow.com/docs/r/security-management/view-security-annotations-report.html?contentId=rB9jny0zzoHjPcxY0QGf7g) - [Components installed with Security Support Common](https://www.servicenow.com/docs/r/security-management/install-with-sec-sup-common.html?contentId=ITASdsHOS7LVnrGGbFOzxg) - [View components installed with Security Support Common](https://www.servicenow.com/docs/r/security-management/installed-with-secops-common-NEW.html?contentId=ijq1jHOggkZPDuxYqcDNSA) - [Search Security Operations](https://www.servicenow.com/docs/r/security-management/t_SearchSecOps.html?contentId=9p711jDfsYDuKjI802lv0Q) - [Security Operations Integration Reference](https://www.servicenow.com/docs/r/security-management/secops-integ-ref.html?contentId=ulVl4B0NbuJbzBVmqR5Q~Q) - [ServiceNow Security Operations integration development guidelines](https://www.servicenow.com/docs/r/security-management/c_IntegrationWritingGuidelines.html?contentId=fxi~CMpxssDlDhtE88HPxw) - [Types of ServiceNow integrations provided](https://www.servicenow.com/docs/r/security-management/c_TypesOfIntegrationsProv.html?contentId=RilnxyMECsHglbuQT6CWQQ) - [Security Operations Integration Configurations](https://www.servicenow.com/docs/r/security-management/third-party-integrations.html?contentId=TQmOv7Ftkcy5S5bQx7palQ) - [Activate and configure third-party integrations](https://www.servicenow.com/docs/r/security-management/install-config-3rd-party-integs.html?contentId=B55~MX0NQkzviM46yxTDYw) - [Create an integration](https://www.servicenow.com/docs/r/security-management/create-integrations.html?contentId=gHFuzAUTpG4_JuB8351~ww) - [Tips for writing integrations](https://www.servicenow.com/docs/r/security-management/c_BestPractisesIntegrations.html?contentId=OFuQ2xGT6a1DOD2MEGADbQ) - [Integration troubleshooting](https://www.servicenow.com/docs/r/security-management/c_IntegrationTroubleshooting.html?contentId=lKqPqm4NGE1ueHap0IQyVw) - [Replace an untrusted or expired third-party SSL certificate](https://www.servicenow.com/docs/r/security-management/t_Import3rdPartySSLCert.html?contentId=CDhQRiGuSggYW6a26vdhbA) - [Integrations Capabilities framework 2.0](https://www.servicenow.com/docs/r/security-management/cj-sir-capfmw-about.html?contentId=GaqVleHlma2G7oegJ9g4CQ) - [REST APIs for third-party integration with Security Operations](https://www.servicenow.com/docs/r/security-management/third-party-script-integrations.html?contentId=tGhmiSA6Vscun2GAGqew8w) - [Integration capabilities](https://www.servicenow.com/docs/r/security-management/integration-capabilities.html?contentId=o3uY4g_PczznneOA~n7qqg) - [Security Operations Integration- Block Request capability](https://www.servicenow.com/docs/r/security-management/block-request-capability.html?contentId=AjJ_39vKBckxCCeRXXDD6g) - [Run Block Request](https://www.servicenow.com/docs/r/security-management/run-block-request.html?contentId=DcEWkm~w4RtOjLG3irFUvg) - [Security Operations Integration - Block Request Flow](https://www.servicenow.com/docs/r/security-management/secops-integration-block-request-workflow.html?contentId=~Ldl9esgPK5S4xKHHQ0RsQ) - [Security Operations Integration- Email Search and Delete capability](https://www.servicenow.com/docs/r/security-management/email-search-capability.html?contentId=bpTzt7cl1oZJ8aKwbplG7A) - [Security Operations Integration - Email Search and Delete flow](https://www.servicenow.com/docs/r/security-management/secops-integ-email-search-delete.html?contentId=uHCDoETzbRpsghw0SIMDDg) - [Legacy: Execution Tracking Begin (Mail Search) action](https://www.servicenow.com/docs/r/security-management/execution-tracking-begins-mail-search-activity.html?contentId=ysO2TDuCU6kzA1g1N622lg) - [Security Operations Integration- Enrich CI capability](https://www.servicenow.com/docs/r/security-management/enrich-ci-capability.html?contentId=RQbcQvD8iOKOTDfBqJaikA) - [Security Operations Integration - CI Enrichment flow](https://www.servicenow.com/docs/r/security-management/secops-integ-enrich-ci-wf.html?contentId=HaxXpv9fF3P17ha~3g2~Ow) - [Security Operations Integration- Enrich Observable capability](https://www.servicenow.com/docs/r/security-management/enrich-observable-capability.html?contentId=TByuwqq3PSzuGoQwoNNz2g) - [Security Operations Integration - Enrich Observable flow](https://www.servicenow.com/docs/r/security-management/secops-integration-enrich-observ-wf.html?contentId=5hNShld74KL5NA09mysMBA) - [Security Operations Integration- Get Network Statistics capability](https://www.servicenow.com/docs/r/security-management/get-network-statistics-capability.html?contentId=aWH~MIr9TW4EOdo0UU7ezw) - [Security Operations Integrations - Get Network Statistics flow](https://www.servicenow.com/docs/r/security-management/secops-integration-get-network-stats-workflow.html?contentId=iTvU1YIkBG34X3~C1AZTsw) - [Legacy: Execution Tracking - Begin (CIs) Flow Action](https://www.servicenow.com/docs/r/security-management/execution-tracking-begins-cis-activity.html?contentId=d55eBM2oJhoHJCcw7_fp_A) - [Get Network Statistics flow](https://www.servicenow.com/docs/r/security-management/obtain-network-statistics-workflow-integ-ref.html?contentId=kDojxJw8gw21RKidX~a9zw) - [Security Operations Integration- Get Running Processes capability](https://www.servicenow.com/docs/r/security-management/get-running-processes-capability.html?contentId=OeDvtj6Lig06SCzy4D~r4A) - [Security Operations Carbon Black Integration - Get Running Processes Flow](https://www.servicenow.com/docs/r/security-management/secops-integration-cb-get-running-processes-workflow.html?contentId=giNX3JH8O9~HKU32HTV7ew) - [Collect Carbon Black Configurations Flow Action](https://www.servicenow.com/docs/r/security-management/collect-cb-config-activity.html?contentId=CszxU4zM2lwrrWMw_ClKiw) - [Check MID Server Status](https://www.servicenow.com/docs/r/security-management/check-mid-server-status.html?contentId=aWQA3KYHBwX0JY9eUeHLDQ) - [Get Sensor ID Flow Action](https://www.servicenow.com/docs/r/security-management/get-sensor-id-activity.html?contentId=V8Qrazt~m9ZsnBDw1aI_fg) - [Create Session Flow Action](https://www.servicenow.com/docs/r/security-management/create-session-activity.html?contentId=p71QttlG5Xt_CYRZUR3kJw) - [Check Session Status Flow Action](https://www.servicenow.com/docs/r/security-management/check-session-status-activity.html?contentId=GM723uoKQ8mqSRxty0DmwA) - [Create Command Process Flow Action](https://www.servicenow.com/docs/r/security-management/create-command-process-activity.html?contentId=ntgrKFrnzJCAItUKUWID5g) - [Check Command Status and Get Process Flow Action](https://www.servicenow.com/docs/r/security-management/check-command-status-get-process-activity.html?contentId=yVRPMOMsitXXoH9Dl1qIWg) - [Map Processes Data Flow Action](https://www.servicenow.com/docs/r/security-management/map-processes-data-activity.html?contentId=COVgSdjKFXtm84CwccQXLQ) - [Legacy: Capability Execution Tracking - Complete Flow Action](https://www.servicenow.com/docs/r/security-management/capability-execution-tracking-complete.html?contentId=O7OvyW1~vDXNZIM5DQR~3Q) - [Close Session Flow Action](https://www.servicenow.com/docs/r/security-management/close-session-activity.html?contentId=dNn9zIa1wIgRYpzQgS89bw) - [Security Operations System Command Integration- Get Running Processes flow](https://www.servicenow.com/docs/r/security-management/obtain-WMI-retrieval-workflow.html?contentId=3yzweW2UJgB2EQS5iXcPaw) - [Combine results activity](https://www.servicenow.com/docs/r/security-management/combine-results-activity.html?contentId=rdQvlKj5EpoLqme2qXNkCQ) - [Execute Shell Script activity](https://www.servicenow.com/docs/r/security-management/execute-shell-script-activity.html?contentId=lYLcLQUg06THyEI1H4h6Yg) - [Extract Shell Script from MID Script activity](https://www.servicenow.com/docs/r/security-management/extract-shell-script-mid-script-activity.html?contentId=Wr0QIrtcQih2THbB4c~5IQ) - [Get Running Processes via PowerShell activity](https://www.servicenow.com/docs/r/security-management/get-running-processes-via-pwrshell-activity.html?contentId=NEordzvfKgBRe1XsrWM1Yw) - [Security Operations - Get Running Processes Flow](https://www.servicenow.com/docs/r/security-management/secops-integration-get-running-processes-workflow.html?contentId=3Pbm7eYs8vunD7F9jej1uA) - [Security Operations Integration- Isolate Host capability](https://www.servicenow.com/docs/r/security-management/isolate-host-capability.html?contentId=vEN3NFmHcUwMwvMRaLzhMw) - [Run Isolate Host](https://www.servicenow.com/docs/r/security-management/run-isolate-host.html?contentId=PhX47jpOz0p5Jp_VIDOm2w) - [Security Operations - Isolate Host Flow](https://www.servicenow.com/docs/r/security-management/secops-integration-isolate-host-workflow.html?contentId=ivmDKo9DFfQE8bQO0oeduQ) - [Security Operations Carbon Black Integration - Isolate Host Flow](https://www.servicenow.com/docs/r/security-management/secops-integration-cb-isolate-host-workflow.html?contentId=uTxEg8IxU7sxPKs2p2RlQA) - [Get Sensor ID Flow Action](https://www.servicenow.com/docs/r/security-management/get-sensor-id-activity-isolate-wf.html?contentId=hkjtIKLWm379HN6qbPd6NQ) - [Set Network Isolation Enabled activity](https://www.servicenow.com/docs/r/security-management/set-network-isolation-enabled-activity-cb-wf.html?contentId=YEZQFGzuHSdgB5VZNos8_w) - [Update Sensor activity](https://www.servicenow.com/docs/r/security-management/update-sensor-activity.html?contentId=RzfXGv7AjOkEe7iUE18_lw) - [Security Operations Carbon Black Integration- Remove Host Isolation Flow](https://www.servicenow.com/docs/r/security-management/secops-integration-cb-remove-host-isolation-workflow.html?contentId=gs9Q9HuHwA3han3wsiYwCQ) - [Security Operations Integration- Publish to Watchlist capability](https://www.servicenow.com/docs/r/security-management/pubish-to-watchlist-capability.html?contentId=l5KN1JHfM_r~6jgLr5H8XQ) - [Security Operations Integration - Publish to Watchlist Flow](https://www.servicenow.com/docs/r/security-management/secops-integration-publish-watchlist-workflow.html?contentId=EQxs3Uvo40hM7QC9M1Xmxw) - [Security Operations Integration- Sightings Search capability](https://www.servicenow.com/docs/r/security-management/sightings-search-capability.html?contentId=DhjgpJpDHrxbI4nnpLQVKw) - [Create sightings search configuration records](https://www.servicenow.com/docs/r/security-management/sightings-search-configurations.html?contentId=hIs8oz44M0ifBvYeQ6gMgg) - [Run a Sightings Search](https://www.servicenow.com/docs/r/security-management/run-sightings-search.html?contentId=4MKUWRkiTCJMS9sSqHKjCA) - [Security Operations Integration - Sightings Search Flow](https://www.servicenow.com/docs/r/security-management/secops-integration-sightings-search-workflow.html?contentId=Btal3CB0mMp52VCiHoXpuQ) - [Sightings Search - Determine Observables activity](https://www.servicenow.com/docs/r/security-management/determine-observables-sightings-search-activity.html?contentId=0oreXX6oyQ2kI7UkZGUxfA) - [Persistent Observable Sightings activity](https://www.servicenow.com/docs/r/security-management/persistent-observable-sightings-activity-arcsight-wf.html?contentId=6iT4vgTowkDJIRTh0czdXg) - [Get Observable Sightings Queries activity](https://www.servicenow.com/docs/r/security-management/get-observable-sightings-queries-activity.html?contentId=BF6Szk381dhc_5B1S8Iuhw) - [Security Operations - Arcsight Logger Sightings Search Flow](https://www.servicenow.com/docs/r/security-management/secops-integration-sightings-search-arcsight-workflow.html?contentId=UW2cxuBCJiYgqj0F1idhCQ) - [Security Operations - Elasticsearch Sightings Search Flow](https://www.servicenow.com/docs/r/security-management/secops-integration-sightings-search-es-workflow.html?contentId=vBmZ9~4wJxJCkEo3N7UYUg) - [Security Operations - McAfee ESM Sightings Search Flow](https://www.servicenow.com/docs/r/security-management/secops-integration-sightings-search-mcafee-workflow.html?contentId=DcLSwJ437sW8nU7FwZymFw) - [Security Operations - QRadar Sightings Search Flow](https://www.servicenow.com/docs/r/security-management/secops-integration-sightings-search-qradar-workflow.html?contentId=UBIfMxxruvOWzV2RkWvdlg) - [Security Operations Integration - Splunk Sightings Search Flow](https://www.servicenow.com/docs/r/security-management/secops-integration-sightings-search-splunk-workflow.html?contentId=lDRLjqVeMqeVpbVPga7Y4g) - [View Sightings Search Results](https://www.servicenow.com/docs/r/security-management/view-sightings-search-results.html?contentId=JfRdrQweQqvdPsMsV4Kj9A) - [Share Sightings Search results](https://www.servicenow.com/docs/r/security-management/share-sightings-search-results.html?contentId=ZLuyGiNLlDj8Op13iocZJQ) - [Share observables from a security incident](https://www.servicenow.com/docs/r/security-management/share-observable.html?contentId=7Z5upNRSfgHW~_5EedcWHw) - [View Sightings Search Details](https://www.servicenow.com/docs/r/security-management/view-sightings-search-details.html?contentId=wdz4kDxaRZ9DUdMrlcMjgA) - [View Sightings Search Data](https://www.servicenow.com/docs/r/security-management/view-sightings-search-data.html?contentId=RNkScj14NdJHR5IoiOGxsg) - [Security Operations Integration - Threat Lookup capability](https://www.servicenow.com/docs/r/security-management/sec-ops-threat-lookups-capability.html?contentId=s2GbsE~5wry4EQ2mxhFnVw) - [Security Operations Integration - Threat Lookup Flow](https://www.servicenow.com/docs/r/security-management/sec-ops-integ-threat-lookup.html?contentId=Z6mJrf1xwZpTCqfcWufMWQ) - [Change the order of flow execution](https://www.servicenow.com/docs/r/security-management/change-wf-execution-order.html?contentId=AcQMFNs1rqTnMmBEg_hJQQ) - [Common Security Operations integration flows and orchestration activities](https://www.servicenow.com/docs/r/security-management/common-wf-activities.html?contentId=NqfBdlF84oSP~J6RnqjtkA) - [Legacy: Execution Tracking - Begin Flow Action](https://www.servicenow.com/docs/r/security-management/execution-tracking-begin.html?contentId=VAZOlr5ITrS8xQvhsITf4Q) - [Legacy: Capability Execution Tracking - Complete Flow Action](https://www.servicenow.com/docs/r/security-management/capability-execution-tracking-complete-activity.html?contentId=LaqVV9b0~ZJFdVfwLvM54w) - [Legacy: Capability Execution Tracking- Failure Flow Action](https://www.servicenow.com/docs/r/security-management/capability-execution-tracking-failure.html?contentId=azULKjwCGebXqce8wuOmtg) - [Capability - Determine CIs activity](https://www.servicenow.com/docs/r/security-management/determine-cis-activity.html?contentId=cjsjuAUO0Q2RnhRTm~Oneg) - [Create Enrichment Data records Flow Action](https://www.servicenow.com/docs/r/security-management/create-enrich-data-records.html?contentId=v6bUxmQaQ7J83_EEFkamcA) - [Get Configuration Item FQDN Flow Action](https://www.servicenow.com/docs/r/security-management/get-config-FQDN-activity.html?contentId=NNBc0VS88v3Zr0eHNmZ~hg) - [Determine Observables activity](https://www.servicenow.com/docs/r/security-management/determine-observables-activity.html?contentId=d5q7E02SrYFNc~drWgZWtw) - [Get Supported Security Capabilities action](https://www.servicenow.com/docs/r/security-management/get-supported-security-capabilities-activity.html?contentId=Egv8htEpxAsCIIKmPFX8Yg) - [Legacy: Capability Execution Tracking- No Impls action](https://www.servicenow.com/docs/r/security-management/execution-tracking-noimpls-activity.html?contentId=vQZ69c25YYJ7fYnt~T4swg) - [Create Compliance Search Action](https://www.servicenow.com/docs/r/security-management/get-email-details-from-exch-server.html?contentId=mIyv9t_fzGqGNGw5tBaKMg) - [Get IP from CI activity](https://www.servicenow.com/docs/r/security-management/get-ip-from-ci-activity-reference.html?contentId=NZL5L94cl86KvcogpJjl~w) - [Get Network Statistics via netstat Flow Action](https://www.servicenow.com/docs/r/security-management/get-network-stats-netstat-activity.html?contentId=pyvjVQqDHveA848GbykWEA) - [Get running processes via WMI activity](https://www.servicenow.com/docs/r/security-management/get-running-process-WMI-activity.html?contentId=6ZcqEawkJFAnv2553D0z~w) - [Check Compliance Search Status Action](https://www.servicenow.com/docs/r/security-management/search-delete-email-threat-exchange.html?contentId=K99TNeqRYKQ40ZwzdAS39w) - [Update Task Worknotes activity](https://www.servicenow.com/docs/r/security-management/update-task-worknotes-activity.html?contentId=rLdvmpgjTEmNTvf63SrKmg) - [Roll up lookup info to security incident activity](https://www.servicenow.com/docs/r/security-management/r_RollUpScanInfoSI.html?contentId=pxkxNDGjSfizdvfskZjhLg) - [Update security incident with lookup results workflow](https://www.servicenow.com/docs/r/security-management/t_UpdateSecIncScanResults.html?contentId=qz~0Y6Bjr5B87NHcW25LHg) - [Filter Allowlisted Observables activity](https://www.servicenow.com/docs/r/security-management/filter-whitelisted-observables-activity.html?contentId=lP~1K5rfzMYWVnL72OidTA) - [Write content to record as attachment activity](https://www.servicenow.com/docs/r/security-management/write-content-record-attachment-activity.html?contentId=YlLKSalA9jj0QlSVjWbWqA) - [Get IP from CI activity](https://www.servicenow.com/docs/r/security-management/get-ip-from-ci-activity-integ.html?contentId=qQxZSThhTWrYc8jE5zib1Q) - [Legacy: Security Operations workflow triggers](https://www.servicenow.com/docs/r/security-management/workflow-triggers.html?contentId=B6weSGvwu7UVP1nOz4vOQA) - [Legacy: Create Security Operations workflow triggers](https://www.servicenow.com/docs/r/security-management/create-workflow-triggers.html?contentId=AQI5DSfYF9XoumhMh9Se0Q) - [Security Operations Orchestration](https://www.servicenow.com/docs/r/security-management/security-operations-orchestration.html?contentId=OUQRl6mJ8ZC4rccyjJVy8A) - [Security Operations and the ServiceNow Store](https://www.servicenow.com/docs/r/security-management/secops-and-store.html?contentId=jTqazV~bnkG3leesobOIww) - [Download an application from the ServiceNow Store for the first time](https://www.servicenow.com/docs/r/security-management/download-app-first-time.html?contentId=pvCf1hj9GME_G_FgVUP1bw) - [Get entitlement for a Security Operations product or application](https://www.servicenow.com/docs/r/security-management/entitle-secops-product.html?contentId=qlpJTSjC6uN4JmmzM_qmvA) - [Activate a ServiceNow Store application](https://www.servicenow.com/docs/r/security-management/activate-entitled-store-app.html?contentId=CoDy5tvk6hSUZPOYf4gpkw) - [Install a Security Operations integration](https://www.servicenow.com/docs/r/security-management/install-non-core-apps.html?contentId=_T9L2t00~gYmDSYgChj0NQ) - [Update an application previously downloaded from the ServiceNow Store](https://www.servicenow.com/docs/r/security-management/update-app-from-store.html?contentId=QiYWUGJpLrvvKjLW5UEHgw) - [Upgrade your instance to the next family release](https://www.servicenow.com/docs/r/security-management/upgrade-to-next-family.html?contentId=LPBW9VQS42wF_qw5hVqUhg)