---
sourceDocument: Yokohama Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/security-management

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Required components and plugins

# Required components and plugins {#ariaid-title1}

* Release version: Yokohama
* 
* Updated January 30, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

To use Predictive Intelligence for User Reported Phishing, you must install the
following applications  
{#cj-sir-ml-urp-comp__table_wtv_ptc_zlb__entry__2}

| Plugin name | Minimum version |
|-|-|
| Security Incident Response | 9.0.1 or 10.0.2 |
| Predictive Intelligence | Orlando version |
| Predictive Intelligence for User Reported Phishing | 10.0.2 |
[ ]

{#cj-sir-ml-urp-comp__table_wtv_ptc_zlb}  
Note:  
The following new enhancements are available with Security Incident Response 10.4:

* The ability to choose close codes from custom fields for model training.
* The ability to explicitly activate predictions after model building.
* The ability to generate a final verdict on the User Reported Phishing submission using a decision table. (requires Security Operations Spoke 10.3.0)
{#cj-sir-ml-urp-comp__ul_xrt_xtc_zlb}  
To use the new enhancements, you must upgrade the following applications: {#cj-sir-ml-urp-comp__table_zcz_l5c_zlb__entry__2}

| Plugin name | Upgrade to |
|-|-|
| Security Incident Response | 10.0.4 |
| Predictive Intelligence for User Reported Phishing | 10.3.1 |
[ ]

{#cj-sir-ml-urp-comp__table_zcz_l5c_zlb}  
New and updated tables

* sn_sir_ml_urp_config (New): Contains the configuration for the URP ML application.
* sn_sir_ml_urp_feature (New): Records extracted from the sn_si_phishing email table.
* sn_sir_ml_urp_feature_import (New): Used to upload historical phishing email data.
* sn_si_incident (updated): The following new fields were added:
  * Prediction accepted
  * Prediction result
  * Confidence score
  {#cj-sir-ml-urp-comp__ul_ljz_gmb_zkb}
* Script includes
  * URPMLUtil: Retrieves configuration, run prediction job, and track prediction process.
  * URPMLProcessor: Extracts and processes data from the sn_si_phishing_email table.
  * URPMLAction: Executes flow to accept prediction result.
  {#cj-sir-ml-urp-comp__ul_ypl_t2h_nsb}
{#cj-sir-ml-urp-comp__ul_vbd_mlb_zkb}