I am trying to understand exactly how _queryMatch works in the Lookup Rules. There is very little information other than the start of the default scripts.// _queryMatch function checks if the query returns 0, 1 or more than 1 CI. // it returns: // ...
Hi, I am trying to get a query for the scheduled import of assets from tenable SC to ServiceNow, I already have one with the following:Type: VulnerabilityTool: Vulnerability Detail ListBut I don't know if this is correct and I need some more query to...
Do we have an integration facility with MSFT Defender Attack Surface Manager? If yes, kindly share any documentation w.r.t integration procedures
Hi all, I want to know how the "Secure Attachments" are managed on ServiceNow. Say we have a phishing email that got escalated to a security incident or the analyst wants to submit a malicious file to sandbox, is it safe to upload it in "Secure Attac...
I am trying to use custom field as a target field in risk calculator and trying to implement using risk rule. But no data is being populated on custom field. Likewise, if we are using risk rule it populates risk score. So is there any way out to use ...
Can we calculate risk score by having field value in range in risk calculator criteria and not exact value...likewise x field value is 0.8...so instead of that can we have the field value as 0.7-0.9...as such I am taking in range and it's not working...
Hi all,I'm working within the Security Incident Response (SIR) application scope (sn_si) and trying to trigger a Script Include via a client-side UI Action using GlideAjax.The setup: The UI Action and Script Include are both in the sn_si scopeThe Scr...
Hi, We need to implement the contextual knowledge search on security incidents and made changes to display relevant knowledge articles based on the short description of security incidents. We also need to ensure that previous similarly named security...
Dear friends, I run into a problem regarding breakdowns for automated indicators - performance analytics. In my case, I would like to get out of table: sn_si_incident the field: priority and state. However, I cannot chose these fields because they a...
Hi All, We have Tenable.sc integrated with ServiceNow using the ServiceNow integration application. I'm having trouble when the reference data in Tenable is updated but those updates are not received by ServiceNow. I'll illustrate with an example: B...
Hi, Would anyone the best-practice way to configure the visibility and writeability of the Secure notes field on a Security Incident - (for example, configure the field so that only a Security Incident Analyst can write to the field, and allow a Secu...
Hi Everyone! I'm trying to make it possible for us to automatically monitor de integrations for SIR without the need to check if a Token is expired, if the the data was successfully transfered, etc. The idea is to be able to get a notification once a...
Hi All, I want to build integration with CSPM tool.Can you please help:Which integration capability is used to integrate with CSPM tool? what all tables data is integrated with CSPM tool E.G. Test , test groups etc? Any field mapping recommendations...
Hello - trying to make a scheduled job to run a script that will go through all of the Security Incidents currently in the Review state that hasn't been updated in 3 days, and set the state to Closed. The Security Incidents will already have all the ...
Hi, Is there any OOB property / configuration available to limit the number of times a user can Request Exception (Deferral) from Vulnerable Item / Remediation Task? Thanks
