Skip to main content

Context

 

ServiceNow AI Agent Studio, combined with ServiceNow Integration Hub spoke for BeyondTrust Secure Remote Access, allow the creation of AI Agents and workflows to help organizations improve their security posture while making it easier for human beings to accomplish their tasks.

In the post, we feature a video that shows how a conversational AI Agent can assist with the investigation around a Security Incident involving a specific remote worker.

 

 

Integration Hub / Workflow Studio:  Secure Remote Access spoke.

 

 

The spoke includes Actions and Flows.

 

We need to create an AI agents using AI Agent Studio.

 

We need to provide a description and a role.

 

 

We need to add 2 tools to our Agent, which are BeyondTrust SRA spoke actions.

 

BeyondTrust SRA spoke action to allow the Agent to get active session info.

 

BeyondTrust SRA spoke action to allow the Agent to terminate a session.

 

We need to provide information about the task we want to Agent to help with.

 

I would like you to help me investigate a security incident concerning a specific user.
We are using a product called Privileged Remote Access, or PRA, to manage sessions for remote users.
Can you use the Get PRA Sessions Info tool to check if Privileged Remote Access Sessions are active for this user: Albert Junio ?
Can you share some information about the active session for this user?
Can you terminate this session for this user using the Terminate PRA Session by Username tool?

 

 

 

 

Reply


Badge Earners

  • BCA: Endpoint Privilege Management - Windows
    immi563has earned the badge BCA: Endpoint Privilege Management - Windows
  • 5 Courses Completed - Password Safe
    IK-BOKhas earned the badge 5 Courses Completed - Password Safe
  • 5 Courses Completed - Privilege Remote Access
    E Matthisshas earned the badge 5 Courses Completed - Privilege Remote Access
  • BCA: Password Safe
    N Cornejohas earned the badge BCA: Password Safe
  • 1 Courses Completed - Privilege Remote Access
    M.Galanghas earned the badge 1 Courses Completed - Privilege Remote Access
Show all badges
Terms & ConditionsCookie settings