> ## Documentation Index
> Fetch the complete documentation index at: https://specterops-bed-7559-api-key-exp.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Use Security Incident Response Integration with BloodHound Enterprise

> Learn how to use the ServiceNow Security Incident Response integration to manage security incidents based on BloodHound Enterprise attack path findings.

<img noZoom src="https://mintcdn.com/specterops-bed-7559-api-key-exp/Q9Jppg_Pu54SydxZ/assets/enterprise-edition-pill-tag.svg?fit=max&auto=format&n=Q9Jppg_Pu54SydxZ&q=85&s=58adaa7541be6273129abfcb80dd69b4" alt="Applies to BloodHound Enterprise only" width="225" height="45" data-path="assets/enterprise-edition-pill-tag.svg" />

After [installation and configuration](/integrations/service-now/security-incident-response/configure) are complete, the integration begins fetching attack path findings from the BloodHound Enterprise API. The integration creates a Security Incident Response (SIR) ticket for each attack path finding.

To view and manage security incidents created by the integration:

<Steps>
  <Step title="View the list of security incidents">
    1. Log in to your ServiceNow instance.
    2. Click **All** and enter `sn_si_incident.list` in the search bar to navigate to the list of security incidents.
  </Step>

  <Step title="View and manage a security incident">
    1. Click a number to view attack path findings and remediation documentation in the incident details.

           <Frame>
             <img src="https://mintcdn.com/specterops-bed-7559-api-key-exp/QYObGUGCf-MlGBcB/images/integrations/service-now/sir/image2.png?fit=max&auto=format&n=QYObGUGCf-MlGBcB&q=85&s=d528aef227a207489d7deb7fd7369075" alt="A view of the ServiceNow user interface showing a list of security incidents created by the integration, with one incident selected to view details." width="1841" height="871" data-path="images/integrations/service-now/sir/image2.png" />
           </Frame>

    2. Update incident fields as required.

           <Frame>
             <img src="https://mintcdn.com/specterops-bed-7559-api-key-exp/QYObGUGCf-MlGBcB/images/integrations/service-now/sir/image7.png?fit=max&auto=format&n=QYObGUGCf-MlGBcB&q=85&s=63b2e22bce36d335c2223061aa9c6f30" alt="A view of the ServiceNow user interface showing the process of updating a security incident." width="1835" height="895" data-path="images/integrations/service-now/sir/image7.png" />
           </Frame>

       For example, you can post comments in the **Work Notes** field.

           <Frame>
             <img src="https://mintcdn.com/specterops-bed-7559-api-key-exp/QYObGUGCf-MlGBcB/images/integrations/service-now/sir/image36.png?fit=max&auto=format&n=QYObGUGCf-MlGBcB&q=85&s=99eda6f2a80b1191d4247e0d04b5b177" alt="A view of the ServiceNow user interface showing the Work Notes field of a security incident." width="1837" height="860" data-path="images/integrations/service-now/sir/image36.png" />
           </Frame>
  </Step>
</Steps>
