Security Operations Integrations release notes

ServiceNow® Security Operations Integrations product enhancements and updates in the Kingston release.

Activation information

Each integration requires plugin activation and configuration from the Integration Configuration screen. Plugin information for each integration is included in the product documentation for each integration.

New in the Kingston release

Multi-instance configurations
Integrate with multiple instances of the same integration if you use integrations such as Carbon Black and IBM QRadar.
MID server configuration
Specify which active and available MID Servers should be used for integrations that require them, such as Carbon Black and IBM QRadar.

Changed in this release

  • Sighting Search improvements: Integrations that support Sighting Search now provide default Sighting Search Configurations for the most common observable types, and raw results are returned and included in Sighting Search Details.