[Rtir] How Reported Field

[Jorge Ruao]

Hello Guys,

I'm trying to figure out the purpose of the Action "RTIR Set How Reported". I supposed it should set the "How Reported" custom field but after using a fresh RTIR installation in a test environment I realized that this field was not being automatically set when an Incident Report was created by an email sent through mailgate - I was expecting that the "How Reported" custom field gets filled with "Email" but it was still empty.

So, am I missing something here?

Thanks,
Jorge Ruão
 
Computer Security Incident Response Team (CSIRT.FEUP)
Prof. Correia de Araújo Computer Center
University of Oporto - Faculty of Engineering

Phone: +351 220413026 / e-mail: jruao at fe.up.pt

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5076 bytes
Desc: not available
URL: <http://lists.bestpractical.com/pipermail/rtir/attachments/20130219/ef3634a0/attachment.bin>