Security Operations Common provides the shared foundational services, background job processing, and infrastructure that power the Vulnerability Response suite of applications. It handles core state management, item processing pipelines, and cross-application utilities to ensure reliable and scalable vulnerability operations.
Dependency for Vulnerability Response and Security Incident Response applications.
- Background Job State Rolldown — Ensures that state changes on Remediation Tasks are reliably propagated to all associated Vulnerable Items, even when the item count is large, using scalable background job processing.
- Scalable Item Processing Pipeline — Handles large volumes of vulnerable items through paginated processing with configurable thresholds, preventing timeouts and ensuring data consistency.
- SBOM Ingestion Processing — Supports parallel ingestion and processing of Software Bill of Materials (SBOM) data for improved performance at scale.
- Cross-application Shared Services — Provides common utilities and infrastructure shared across Vulnerability Response, Configuration Compliance, and related security applications.
Fixed:
- Security tags are now correctly applied to Security Incident Response records when hierarchical conditions are used in filter groups
- URLs are now correctly recognized as observable data types
- Resolved an issue where duplicate assignment records were being loaded
Permissions and roles:
- Role required:
- System Admin (admin) or Vulnerability Admin (sn_vul.vulnerability_admin) for VR.
- Security Incident Administrator (sn_si.admin) for SIR.