FeedServiceNow

This is a feed integration for extracting indicators from ServiceNow.

Category

Data Enrichment & Threat Intelligence

Pack

FeedServiceNow

Configuration parameters

• url — Server URL (required)
• use_oauth — Use OAuth Login
• use_jwt — Use JWT Authentication
• credentials — Username / Client ID (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• feed — Fetch indicators
• feedReputation — Indicator Reputation
• feedReliability — Source Reliability (required)
• feedExpirationPolicy —
• feedExpirationInterval —
• feedFetchInterval — Feed Fetch Interval
• feedBypassExclusionList — Bypass exclusion list
• feedTags — Tags
• query_url — Query URL (required)
• indicator_field — Indicator Field (required)

Commands (1)

• snow-get-indicators — Retrieve indicators from ServiceNow.