Request Tracker for Incident Response (RTIR) versions 5.0.3 and 4.0.3 are now available. These new releases provide security updates, bug fixes, and some new features. As always, we recommend all users upgrade to the newest versions. Our forum contains details on all of the new releases, linked below:
When upgrading RTIR, you also need to upgrade the underlying RT version as well. New releases of RT 5.0.3 and 4.4.6 are also available and they also contain security updates.
In addition to the security fixes mentioned above, version 5.0.3 contains some new features we think RTIR users will be interested in.
RTIR Homepage is Now a Dashboard
Just like the similar update in RT 5.0.2, the home page in RTIR is now a dashboard, making it even easier to create multiple different homepage configurations and allow users to pick the one that works best for them. Existing homepages are automatically converted as part of the upgrade process. After upgrading, you can set your default using the same gearbox icon in the corner.
Support for CVEs
RTIR now has a CVE custom field by default. As with IPs, scrips now look for CVEs in incoming messages and will automatically set the CVE custom field if any CVE ids are found. When looking at incident tickets, if a CVE is set, a new CVE portlet pulls in information about that vulnerability from the NIST database. It shows selected fields right on the Incident page and links you to the full entry so you can view the full details.
CVE portlet on an Incident page in RTIR
Mandatory On Transition and Time Tracking
This release of RTIR adds compatibility with two popular extensions that are often used with RT.
RT-Extension-MandatoryOnTransition allows you to set rules, like making some fields required, on specific status transitions. This is very helpful when you want to allow people to create an incident without filling out all custom fields, but you want them to fill them out before the incident is resolved.
RT-Extension-TimeTracking adds more inputs for tracking time on specific dates and also provides a "time sheet" type page with hours across all tickets for a week.
New versions of both of these extensions have been released and they can now be used with RTIR 5.0.3.
MISP Integration
Updates in RTIR 5.0.3 also add support for an integration with the MISP threat intelligence sharing platform. We'll have more information on this extension later, but you can use it today.
Upgrade Help
Everything you need to upgrade is always included in new releases, so we encourage you to plan upgrades soon. The full release notes for all of these releases are available with details on what’s changed, and some additional information is posted on our forum. If you need a hand, Best Practical offers RT hosting, migration, upgrades, and professional services, just get in touch with us at sales@bestpractical.com.