---
sourceDocument: Xanadu Operational Technology Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/xanadu/operational-technology

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu Operational Technology Management

ft:clusterId :

    - optm

bundleId :

    - optm

workflow :

    - Technology


---

# Data mapping for the Vulnerability Response Integration with Claroty CTD

# Data mapping for the Vulnerability Response Integration with Claroty CTD {#ariaid-title1}

* Release version: Xanadu
* 
* Updated August 1, 2024
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

This section specifies how fields from the Claroty CTD API are mapped to fields in the ServiceNow tables.

## Vulnerability detection data mapping {#data-mapping-otvr-integration-claroty-ctd__section_q3x_mpk_wxb}

{#data-mapping-otvr-integration-claroty-ctd__table_o5w_bmk_wxb__entry__3}

| Claroty CTD field | ServiceNow field | Notes |
|-|-|-|
|   | Source | Always set to Claroty CTD. |
| Identified_on | First Found |   |
| Last_updated | Last Found |   |
| Status | Status | A status of 0 means Open. A status of 2 means Closed/Fixed. |
| Resource_id | Configuration item | The configuration item (CI) is set through a CI lookup rule that searches the sys_object_source table for the Resource ID. For example, 33.1. |
[ ]

{#data-mapping-otvr-integration-claroty-ctd__table_o5w_bmk_wxb}

## Vulnerability entry data mapping {#data-mapping-otvr-integration-claroty-ctd__section_nnt_npk_wxb}

Vulnerability entries are only created if an existing Common Vulnerabilities and Exposures (CVE) record is not found in the National Vulnerability Database Entry \[sn_vul_nvd_entry\] table. If the Claroty CTD Integration must create a
CVE, it maps the following source fields listed in the table.
{#data-mapping-otvr-integration-claroty-ctd__table_jbh_dmk_wxb__entry__3}

| Claroty CTD field | ServiceNow field | Notes |
|-|-|-|
| Cve_id | ID | Example: CVW-2017-17562 |
| Title | Summary | The integration adds \[Claroty\] to the Summary so that the NVD CVEs, backfilled by Claroty, are visible. For example, the \[Claroty\] Authentication Bypass Vulnerability in SIPROTEC. |
| Cvss | V3_base_score |   |
| Published | Date_published |   |
| Modified | Last_modified |   |
[ ]

{#data-mapping-otvr-integration-claroty-ctd__table_jbh_dmk_wxb}