Advanced Vulnerability Response configuration tasks

The following setup tasks require coding or advanced ServiceNow expertise and are not considered part of the basic configuration.

You might prefer to perform these tasks only if you have advanced coding experience or you have a expert knowledge of the ServiceNow AI Platform.

• Create domain-separated imports for an integration
  If you require imported data to be in a specific domain, the user assigned to run the integrations must belong to that domain.
• Create a Vulnerability Response CI lookup rule
  The CI Lookup Rules module contains rules that are used to find the matching record for host information received during third-party vulnerability integration imports. The host information is matched with the discovered items, unmatched configuration item classes, and the Configuration Management Database (CMDB).
• Detection key configurations for Vulnerability Response
  Use configurable detection keys to choose between Asset ID and Configuration Item, with validations, UI controls, and a schedule job to update existing detections.
• Configure the vulnerable item key
  Configure the granularity of the vulnerable item (VIT) key in the Vulnerability Response application to define what makes a vulnerable item (VIT) in your organization.
• Filtering within Vulnerability Response
  Remediation Task Rules, Calculators, and Assignment Rules use conditions during import, created using the Condition builder. Changes to their criteria can affect performance since each record is evaluated using these filters.
• Severity mapping for Vulnerability Response
  Vulnerability Response ships with National Vulnerability Database (NVD) to normalized ServiceNow severity mapping. ServiceNow third-party integrations provide severity mappings upon installation. These maps can be adjusted by changing the fields in existing maps.
• Create a Vulnerability Response severity map
  Vulnerability Response severity mapping transforms third-party source severity fields to recognizable fields in Vulnerability Response.
• Define service classifications for Vulnerability Response reporting and related lists
  Bring more focus to reporting and related lists in Vulnerability Response by defining service classifications. In addition, reducing the number of requested service classifications can improve the performance of Vulnerability Response data gathering.
• Audit selected fields in the vulnerable items table
  Enable auditing for fields you specify in the Vulnerable Item [sn_vul_vulnerable_item] table. This method of auditing is useful when you want to audit fields that you cannot audit by default.
• Vulnerability Response background job framework configuration
  Define the background job framework in your ServiceNow AI Platform® instance. These configuration changes can help you improve performance by reducing the amount of system resources used to run your background jobs.

Parent Topic:Vulnerability Response implementation