How Reported Field

Hello Guys,

I’m trying to figure out the purpose of the Action “RTIR Set How Reported”. I supposed it should set the “How Reported” custom field but after using a fresh RTIR installation in a test environment I realized that this field was not being automatically set when an Incident Report was created by an email sent through mailgate - I was expecting that the “How Reported” custom field gets filled with “Email” but it was still empty.

So, am I missing something here?

Thanks,
Jorge Ruão

Computer Security Incident Response Team (CSIRT.FEUP)
Prof. Correia de Araújo Computer Center
University of Oporto - Faculty of Engineering

Phone: +351 220413026 / e-mail: jruao@fe.up.pt

smime.p7s (4.96 KB)

I’m trying to figure out the purpose of the Action “RTIR Set How
Reported”. I supposed it should set the “How Reported” custom field
but after using a fresh RTIR installation in a test environment I
realized that this field was not being automatically set when an
Incident Report was created by an email sent through mailgate - I was
expecting that the “How Reported” custom field gets filled with
“Email” but it was still empty.

This is 2.6.1?

You need this patch.

-kevin

Kevin,

thanks. It’s working now.

Regards,
Jorge Ruão

Computer Security Incident Response Team (CSIRT.FEUP)
Prof. Correia de Araújo Computer Center
University of Oporto - Faculty of Engineering

Phone: +351 220413026 / e-mail: jruao@fe.up.ptOn 19/02/2013, at 16:00, Kevin Falcone wrote:

On Tue, Feb 19, 2013 at 03:49:13PM +0000, Jorge Ruao wrote:

I’m trying to figure out the purpose of the Action “RTIR Set How
Reported”. I supposed it should set the “How Reported” custom field
but after using a fresh RTIR installation in a test environment I
realized that this field was not being automatically set when an
Incident Report was created by an email sent through mailgate - I was
expecting that the “How Reported” custom field gets filled with
“Email” but it was still empty.

This is 2.6.1?

You need this patch.
This CF was renamed during the 2.4->2.6 update · bestpractical/rtir@0ba865f · GitHub

-kevin


Rtir mailing list
Rtir@lists.bestpractical.com
The rtir Archives

smime.p7s (4.96 KB)