Threat Intelligence release notes

ServiceNow® Threat Intelligence is a new application in the Helsinki platform release.

Threat Intelligence integrates with ServiceNow Security Operations to include an Indicator of Compromise (IoC) threat table that is linked to security incidents and configuration items or assets.

This IoC functionality helps you determine whether a threat has been seen before in other security incidents or on other systems. It gives you context when assessing the severity of an alert or incident.

Threat Intelligence enables support for multiple threat feeds, the ability to query multiple sources for reputational ratings. It supports STIX format and TAXII exchange profiles.

See Threat Intelligence for more information.

Activation information

An administrator can activate the Threat Intelligence (com.snc.threat) plugin.

Browser requirements

See Generally supported browsers.