Thank you for your feedback.
Form temporarily unavailable. Please try again or contact docfeedback@servicenow.com to submit your comments.
Versions
  • London
  • Kingston
  • Jakarta
  • Istanbul
  • Helsinki
  • Geneva
  • Store
Close

Security Operations Integration - Enrich CI capability

Security Operations Integration - Enrich CI capability

The Enrich CI capability allows you to enrich data for configuration items associated with a security incident.

The Enrich CI capability has a workflow, Security Operations Integration - CI Enrichment workflow. When the capability workflow runs, it executes additional workflows for the activated implementations. You can specify an implementation to use to perform enrichment on the selected CIs, or you can perform the enrichment using all implementations.
Note: This enriched data is not the type of data you would want to store in your CMDB as it is forensic data that is specific to a given investigation--for example, performing a memdump from a CI. Instead, the data is stored in the Configuration Item Enrichment [sn_sec_cmn_ci_enrichment_result] table.
Note: If no implementations are available, capability actions are not displayed in product menus.