To configure the Threat Intelligence plugin to use MITRE features, perform the following procedure.
Procedure
- Log in to your ServiceNow instance.
- Verify that you have the system admin role.
- Go to TAXII profile.
- Click MITRE ATT&CK®.
- Click Enterprise ATT&CK in the MITRE ATT&CK®’s TAXII Collections table.
- Click Integration Runs.
- Select the Number of Integration Runs to execute.
If
Integration Run is empty, click
New to create a new Integration Run and then click
Process.
- Click Execute Now. Wait until the state changes to Complete.