Documentation
</> Developer Portal
You are viewing documentation for RTIR 4.0.0, which is end-of-life and no longer supported. The current release is 6.0.4 (view the current version of this page).
RTIR supports upgrading from all older versions. See the README for instructions or contact us for assistance.
RTIR 4.0.0 — Documentation

Everything you need to run RT for Incident Response

Search or browse the docs for the security teams who triage reports, run investigations, and track countermeasures with RTIR.

Press Enter to search
Popular:TutorialRTIR ConfigConstituenciesAdministration TutorialUPGRADING-4.0README
01For security team membersUsing RTIRTriage incident reports, run investigations, and track countermeasures day to day.Start with the RTIR Tutorial →02Install, configure & operateAdministratorsInstall RTIR on RT, set up constituencies and lifecycles, and configure scrips.Start with the install README →03Moving to a new versionUpgradingVersion-by-version upgrade guides and pre-flight checks for RTIR.Start with UPGRADING-4.0 →

All documentation

Using RTIR 3

TutorialConstituenciesDocIndex

Administration 2

AdministrationTutorialRTIR Config

Install & Upgrade 7

READMEUPGRADINGUPGRADING-4.0UPGRADING-3.2UPGRADING-3.0UPGRADING-2.6UPGRADING-2.4

Reference

Scrip actions, conditions, and developer modules that ship with RTIR.

Scrip Actions 13

RT::Action::RTIRRT::Action::RTIR_ActivateRT::Action::RTIR_ChangeChildConstituenciesRT::Action::RTIR_ChangeChildOwnershipRT::Action::RTIR_ChangeParentOwnershipRT::Action::RTIR_FindIPRT::Action::RTIR_MergeIPsRT::Action::RTIR_OpenParentRT::Action::RTIR_ResolveChildrenRT::Action::RTIR_SetCountermeasureStatusRT::Action::RTIR_SetDueIncidentRT::Action::RTIR_SetHowReportedRT::Action::RTIR_SetIncidentResolution

Scrip Conditions 7

RT::Condition::RTIRRT::Condition::RTIR_CustomerResponseRT::Condition::RTIR_LinkingToIncidentRT::Condition::RTIR_MergeRT::Condition::RTIR_RequireDueChangeRT::Condition::RTIR_RequireReportActivationRT::Condition::RTIR_StaffResponse

Developer & Modules 5

RT::IRRT::IR::ConfigNet::Whois::RIPENet::Whois::RIPE::IteratorNet::Whois::RIPE::Object

Get help & connect

ForumCommunity WikiGitHubBlogCommercial Support