FeedServiceNow

This is a feed integration for extracting indicators from ServiceNow.

Data Enrichment & Threat Intelligence · ServiceNow Generic Feed · Feed

Configuration parameters

  • url — Server URL (required)
  • use_oauth — Use OAuth Login
  • use_jwt — Use JWT Authentication
  • credentials — Username / Client ID (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • feed — Fetch indicators
  • feedReputation — Indicator Reputation
  • feedReliability — Source Reliability (required)
  • feedExpirationPolicy —
  • feedExpirationInterval —
  • feedFetchInterval — Feed Fetch Interval
  • feedBypassExclusionList — Bypass exclusion list
  • feedTags — Tags
  • query_url — Query URL (required)
  • indicator_field — Indicator Field (required)

Commands (1)

  • snow-get-indicators

    Retrieve indicators from ServiceNow.