To configure the Threat Intelligence plugin to use MITRE features, perform the following procedure.

Prerequisites

Install the Threat Intelligence Plugin

Procedure

  1. Log in to your ServiceNow instance.
  2. Verify that you have the system admin role.
  3. Go to TAXII profile.
  4. Click MITRE ATT&CK®.
  5. Click Enterprise ATT&CK in the MITRE ATT&CK®’s TAXII Collections table.
  6. Click Integration Runs.
  7. Select the Number of Integration Runs to execute.
    If Integration Run is empty, click New to create a new Integration Run and then click Process.
  8. Click Execute Now. Wait until the state changes to Complete.