Skip to main content

Cortex ASM - ServiceNow ITSM Enrichment

This Playbook is part of the Cortex Attack Surface Management Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.8.0 and later.

Given search terms, this playbook will query ServiceNow ticket descriptions and short descriptions over the last 30 days and set users that were found in the assigned_to field in those ServiceNow tickets. Note, the max amount of tickets returned from querying is 100.


This playbook uses the following sub-playbooks, integrations, and scripts.


This playbook does not use any sub-playbooks.


ServiceNow v2


  • GridFieldSetup
  • GetTime
  • Set


  • servicenow-get-record
  • servicenow-query-tickets

Playbook Inputs#

NameDescriptionDefault ValueRequired
search_termsSearch terms to be used in the ServiceNow ITSM query searchOptional

Playbook Outputs#

There are no outputs for this playbook.

Playbook Image#

Cortex ASM - ServiceNow ITSM Enrichment