jsn / ServiceNow, simplified.
AustraliaREFERENCE GUIDE

Vulnerability Management Support

On this page

Vulnerability Management Support

Learn how a new vulnerability is created in TISC with a related vulnerability in VR.

Before you begin

Role required:

  • System Administrator (view, create or edit)

  • sn_sec_tisc.admin (view)

About this task

When new vulnerability is created in TISC and there is a related vulnerability in VR.

  • If VR vulnerability(v2) score is > 8 OR VR vulnerability(v3) score is > 8.

  • Total VI’s associate to it are greater than 0.

Procedure

  1. Navigate to All > Threat Intelligence Security Center > Administration.

  2. Select Automated Flows.

  3. Select Vulnerability Management Support action link to view the respective rule details in the flow designer.

  4. View the flow designer action for the following trigger:

    When new vulnerability is created in TISC and there is a related vulnerability in VR.
  5. If the percentage of total VI’s remediated that are associated to that vulnerability is 100%, then:

    1. Add a tag called Remediated to the observable.

  6. Else, enrich the observable data with available capabilities:

    1. Create a remediation task for VR.

    2. Notify the concerned VR team’s regarding it.

      [Omitted image “tisc-vul-mgmt-support.png”] Alt text: Vulnerability management support

Parent Topic:Working with automated flows

Related topics

{Automated IOC Enrichment}[]

{Automated sharing of high-risk IOC’s with trusted partners}[]

{Automatically add threat intelligence to a TAXII collection}[]

{Create vulnerability assessment for zero day}[]

{Analyze, assess, and disseminate observables}[]

{Analyze and assess threat IoC’s}[]

{Zero-day vulnerability tracking}[]

{Automatic Threat Actor priority tagging}[]

{Automated flows tables}[]

Keep exploring.

Find another answer, or bring this documentation into your own tools.