Integrating Invicti Enterprise with ServiceNow Vulnerability Response

ServiceNow Vulnerability Response helps you in tracking, prioritizing, and resolving vulnerabilities. The Vulnerability Response application imports and automatically groups issues according to group rules, allowing you to remediate vulnerabilities quickly.

You can integrate Invicti Enterprise with ServiceNow Vulnerability Response to import issues identified by Invicti Enterprise into the vulnerability response application. Integrating Invicti Enterprise with the Vulnerability Response helps you to increase security in your environment.

For further information, see Streamline your vulnerability response with Invicti’s ServiceNow integration.

This topic describes how to integrate it with Invicti Enterprise.

For further information, see What Systems Does Invicti Integrate With?.

ServiceNow Vulnerability Response fields

This table lists and explains the ServiceNow Vulnerability Response Fields in the New ServiceNow Vulnerability Response window.

Generating and using Invicti Enterprise’s ServiceNow integration scripts

There are three steps to this:

1. Generating the integration script in Invicti Enterprise.
2. Installing the Vulnerability Response application to ServiceNow.
3. Adding the script to ServiceNow Vulnerability Response

Step 1. How to generate Invicti Enterprise’s ServiceNow integration scripts

1. Log in to Invicti Enterprise.
2. From the main menu, go to Integrations > New Integration > ServiceNow Vulnerability Response.

3. In the Assignee User Id field, enter a name. (For further information about the User Id, see How to find User Id.)
4. In the Website drop-down, select a website.
5. In the Website Group Name field, enter a group name, if any.
6. In the Integration Script Name field, enter a friendly name for your script.
7. Select Generate.

Make sure you enter your User ID and User Token information into the script. For further information about your API information, see API Settings.

The following section describes third-party software, and we cannot guarantee that this description will be up-to-date.

Step2. How to install the Vulnerability Response application to ServiceNow

1. Log in to ServiceNow Vulnerability Response.
2. On the left navigation pane, type Applications to the filter navigator box. Then, from the All Available Applications, select All.
3. From the All Applications section, type Vulnerability Response, then select Install/Update All.
4. From the Install dialog, select Install. Wait for the installation to be over.

Step3. How to add the script to ServiceNow Vulnerability Response

1. Now, on the left navigation pane, type Integrations to the filter navigator box. From the Vulnerability Response section, select Integrations.
2. From the Vulnerability Integrations section, select New to create the script.

3. On the New Record page, enter the following information:

• Name: Enter a friendly name for your integration script.
• Active: Select to activate the integration script.
• Run: From the drop-down, select the run interval.
• Time: Select the time interval for the integration script.
• On the Integration Details section, do the following:

1. 1. Next to the Integration Script field, select the search icon
   2. On the Script Includes window, select New.
   3. On the New Record window, enter a name.

This name and the integration script name you entered in Invicti Enterprise must be the same.

4. 4. Paste your script generated by Invicti Enterprise in the text area. Then, select Submit.
   5. You saved your script; you now must select it from the list. To do so, next to the Integration script field, select the search icon.
   6. From the Script Includes window, select your script from the list. After selecting, ServiceNow imports your script into the Integration Script field.
   7. Now, from the Report processor strategy drop-down, select Custom Report Processor.

8. 8. Select the search icon, and select the Vulnerability Report Processor Base from the drop-down.
   9. Select Submit to save your script.

After these steps, you can select your script from the Vulnerability Integrations page and select Execute Now to run your script.

When you execute the script, ServiceNow Vulnerability Response runs your script based on the time interval you preferred while creating the integration.

You can check whether ServiceNow runs your script successfully. To do so, you can check the Vulnerability Integration Runs tab.

To see all issues the ServiceNow Vulnerability Response has collected via the script, you can check the Third-Party section. To do so, on the left navigation pane, type Third-Party to the filter navigator box. Then, from the Vulnerability Response, select Third-Party. You can view all issues and their details.

How to find User ID in ServiceNow Vulnerability Response

1. On the left navigation pane, type Users to the filter navigator box.
2. From the Organization section, select Users.
3. From the Users section, select the User ID to assign the task.