Dropzone AI Documentation
WebsiteTest Drive
  • Dropzone Documentation
  • Overview
    • Alert Sources
    • Data Sources
    • Communicators
    • On-prem Support - Dropzone Connector
    • Interactive Chat
    • Metrics Guide
  • Dropzone Administraton
    • Team Admin
      • Google Workspace SAML
      • Okta SAML
  • Dropzone Integrations
    • Alert + Data Source Integrations
      • Amazon Web Services (AWS)
        • Cross-Account Access via CloudFormation
        • Cross-Account Access via Console
      • CrowdStrike
      • Datadog
      • Elasticsearch
      • Google Workspace
      • Google GCP
      • Jira
      • Microsoft (MS 365 etc)
        • Microsoft 365 / Microsoft Defender
        • Microsoft Sentinel
        • Microsoft 365 Exchange Online Management
      • Palo Alto Networks Firewall
      • Panther
      • QRadar
      • SentinelOne
      • Splunk
      • Sumo Logic
    • Alert Integrations
      • Gem
      • ServiceNow
    • Communicators
      • Microsoft Teams
      • Slack Communicator
    • Data Source Integrations
      • AbuseIPDB
      • Active Directory (LDAP)
      • Archive Inspector
      • Blocklist.de
      • CAPA
      • Censys
      • Crowdstrike Falcon Intelligence
      • DNSResolver
      • Dropzone URL Sandbox
      • EchoTrail
      • File
      • GreyNoise
      • Hybrid Analysis
      • Host.io
      • IPInfo.io
      • IPQualityScore
      • MalwareBazaar
      • Nuclei
      • NVD
      • Okta
      • oletools
      • OpenSSL Sign Code
      • PDF Analysis
      • Perplexity AI
      • PhishTank
      • Shodan
      • TShark
      • QRadar
      • UnshortenMe
      • URLhaus
      • Urlscan.io
      • VirusTotal
      • Vision
      • WHOIS
      • YARAify
Powered by GitBook
On this page

Was this helpful?

  1. Dropzone Integrations
  2. Alert Integrations

ServiceNow

PreviousGemNextCommunicators

Last updated 15 hours ago

Was this helpful?

ServiceNow is a Alert Source integration. The Dropzone platform creates investigations based on alerts from Alert Sources.

Dropzone AI integrates with , a cloud-based platform that provides digital workflow automation.

Enable ServiceNow

To enable the Alert Source integration, you will need the following information:

Dropzone Field
Source

Subdomain

The same as subdomain in your ServiceNow url, eg https://.service-now.com

Username

The username of the admin user you are using

Password

The password for the aforementioned user's account

To enable the Alert Source integration, do the following:

  • Navigate to your Dropzone AI tenant home page e.g. https://mycompany.dropzone.app

  • In the bottom left hand corner, click Settings > Integrations

  • Click "Available"

  • In the Search bar, search ServiceNow, then click "Configure"

  • Input your subdomain, username, and password

  • Input your desired poll interval and poll lookback

  • To have the investigation results commented to each ticket, check the box under the Ticket Sync header

  • Choose your desired Investigation Result Comment Entity Type

  • Click "Test & Save" to finish

If you have any errors or questions, engage your Dropzone AI support representative.

In the Alert queries section, input a ServiceNow

encoded filter query string
ServiceNow
Integrations Dropdown
Click Available
The ServiceNow Alert Tile
The ServiceNow Alert Configuration (pt 1)
The ServiceNow Alert Configuration (pt 2)
The ServiceNow Alert Configuration (pt 3)