Business rules installed with Security Support Common Security Operations adds the following business rules.Table 1. Business rules for Security Operations Common Support Business rule Tables Description Clean up target data Enrichment Data Mapping Field[sn_sec_cmn_enrichment_data_mapping_field] Cleans up the target field, static value, and target enrichment mapping based on the transform type selected. Clear irrelevant manually added Filter Group[sn_sec_cmn_filter_group] Removes irrelevant entries manually added to a filter group. Disallow Parent to be Child Additional Filter Group Condition [sn_sec_cmn_m2m_filter_group_condition] Prevents parent field being set to the current record. Handle complete state Integration Run [sn_sec_cmn_integration_run] When an integration run is complete, executes the next run. Handle ready state Integration Run [sn_sec_cmn_integration_run] Starts the integration run. Infer child fields and validate [sn_sec_cmn_m2m_filter_group_condition] Validates that fields are relevant for a filter group. One action per field Duplication Action[sn_sec_cmn_duplication_action] Prevents multiple actions on a single table field. Populate factory script fields Security Data Integration[sn_sec_cmn_integration] Ensures all processor scripts are populated on integrations. Populate job script from integration Security Data Integration[sn_sec_cmn_integration] Invokes an integration run. Prevent duplicate field mapping field Enrichment Data Mapping Field[sn_sec_cmn_enrichment_data_mapping_field] Prevents the same integration result field being assigned to multiple outputs. Prevent duplicate field mapping fields Field Mapping Field [sn_sec_cmn_field_mapping_field] Prevents saving duplicate field mapping fields on the same field mapping record. Prevent duplicate field mappings Field Mappingsn_sec_cmn_field_mapping Retires the old/existing record, if there is a field mapping that has the same source and target table as the current record. The active flag is set to false. Prevent invalid insertion Manually Added Record [sn_sec_cmn_m2m_filter_group_manual] Prevents insertion of duplicate records. Prevent invalid insertion Manually Added CI[sn_sec_cmn_m2m_filter_group_ci] Prevents insertion of duplicate records. Prevent invalid insertion Manually Added Task[sn_sec_cmn_m2m_filter_group_task] Prevents insertion of duplicate records. Process Security Email Security Email Events[sn_sec_cmn_email_event] When a security email event is created, processes the new email. Process Vulnerability Attachments Integration Data Source Import Queue Entry[sn_sec_cmn_ds_import_q_entry] When an attachment is present in the data sources import queue, processes the attachment as an import. Record separator to scratchpad Field Transform[sn_sec_cmn_email_field] If a record separator is present, updates the scratchpad flag to indicate the fact. Remove fields on source or target change Field Mapping[sn_sec_cmn_field_mapping] Removes all existing fields if the target or source table changes on the field mapping. Replace quotes Exchange Search Criteria[sn_sec_cmn_search_criteria] Removes single and double quotation marks on the search_text field when a record is created or updated. Prevents you from entering a colon in the search_text field and returns an error in the message bar. Run process on insert Integration Process[sn_sec_cmn_integration_process] When an integration process is created, invokes the integration processor to perform the import. Set description field Duplication Action [sn_sec_cmn_duplication_action] When a duplicate action is defined, auto-sets the description to describe what it does. Set order value Additional Filter Group Condition[sn_sec_cmn_m2m_filter_group_condition] Ensures the condition order is updated when adding filter conditions to a filter group. Set the description Field Transform[sn_sec_cmn_email_field] For email processing field transform, sets the description to reflect what the transform does. Store field names Duplication Rule[sn_sec_cmn_duplication_rule] Updates the list of identifying field names in an email rule. Store lookup information Field Transform[sn_sec_cmn_email_field] When defining an email field transform, finds the correct type for reference fields. Store M2M Information Duplication Action[sn_sec_cmn_duplication_action] Updates the relationship between fields and email processing rules. Toggle criteria active on query result Exchange Search[sn_sec_cmn_exchange_search] Ensures an exchange search criteria is active after an update. Update query from criteria Exchange Search[sn_sec_cmn_exchange_search] Runs when the Query Result changes and updates the Query for Criteria field. Update query from criteria on exchange Exchange Search[sn_sec_cmn_search_criteria] Runs when a record is updated, inserted, or deleted and updates the Query for Criteria field on the associated Exchange search. Verify equal field types Field Mapping Field [sn_sec_cmn_field_mapping_field] Verifies that the selected field on the field mapping fields form has the same type. string = string, integer = integer Boolean = Boolean Reference + table = Reference + table For example, CMDB_CI in source table and AFFECTED_CI in target table.