Rule 3 - ServiceNow Master Data Tables updated by CI Sync for Defender for Endpoint

Rule Synopsis

These are the rule/s that determine the ServiceNow master data and master data tables updated by CI Sync for MS Defender for Endpoint.

Rule Details and Default

The default rule/s are described by the mapping table shown below.

Master Data Record Set

Destination ServiceNow Table

Explanation

Software Packages

cmdb_ci_spkg

CI Sync creates a single master software package record for each unique instance of installed software applications across all CI.

CVE Definitions

Custom Table#1

CI Sync creates a single master CVE definition record for each unique CVE detected across all CIs.

CVE Instances

Custom Table#1

CI Sync creates a relationship between each CI which contains a detected CVE.

#1 Custom Tables are added via an Updateset provided by Syncfish. Please refer to the setup instructions Add MS Defender for Endpoint for more information.

Override Options

Context

Customers may consider changing the destination master data tables to those shown above.

Options

There are no standard options the override of these rules. Please contact your Syncfish representation to discuss any requirements for potential overrides.

Overriding via Connection Settings

N/A

Additional Information

N/A

N/A

Support Model for Rule Overrides

Question: Can overrides be performed by customers without a Syncfish Extended Implementation and Support Plan?

Answer: No (a plan is needed - see below)

Question: Which Syncfish Extended Implementation and Support Plan is required to obtain overrides of this rule

Answer: Either a Silver Plan or Gold Plan