ServiceNow

Use ServiceNow data for Cortex Cloud.

Secure configurations, monitor identity risks, and manage agent security across your ServiceNow environment.

This connector includes the following capabilities and sub-capabilities (if applicable):

• Agent Security Scanning: This capability is available with any active Cortex Cloud Posture Security license.

  • agent-activity-scan: Agent Activity Monitoring. This connector is available with any active Cortex Cloud Posture Security license.
• Identity Posture: Maintain visibility and control over ServiceNow identities, including users, groups and roles. This capability is available with any active Cortex XSIAM, Cortex Cloud Posture Security, Cortex Cloud Runtime Security, or Cortex Data Security license.

  • Groups: Ingest groups from ServiceNow. This connector is available with any active Cortex XSIAM, Cortex Cloud Posture Security, Cortex Cloud Runtime Security, or Cortex Data Security license.
  • Roles: Ingest roles from ServiceNow. This connector is available with any active Cortex XSIAM, Cortex Cloud Posture Security, Cortex Cloud Runtime Security, or Cortex Data Security license.
  • Users: Ingest users from ServiceNow. This connector is available with any active Cortex XSIAM, Cortex Cloud Posture Security, Cortex Cloud Runtime Security, or Cortex Data Security license.
• Security Posture: Detect, monitor and alert on settings of your SAAS application. This capability is available with any active Cortex XSIAM or Cortex Cloud Posture Security license.

  • saas-posture-config-remediation: Help remediate the misconfigured security settings of your SAAS application. This connector is available with any active Cortex XSIAM or Cortex Cloud Posture Security license.

To configure this connector, follow the steps outlined in the configuration wizard.