Security Operations enrichment data mapping

Enrichment Data Mapping transforms data from XML, JSON, or Properties files to ServiceNow records. Security Operations workflows use enrichment data maps to provide output data to security incidents.

Enrichment data map output from Security Operations workflows is displayed in the Enrichment Data tab on the security incident form.

For more information on enrichment data map, see Create a Security Operations enrichment data map.