RTIR: RT for Incident Response

RTIR vs. RT

RT is a top-of-the-line toolset customizable for any number of tasks and workflows with a core based on the idea of tracking anything.

RTIR, on the other hand, is a purpose-built product for computer security incident response written using the tools provided by RT. Think of RTIR as a special edition or flavor of RT, ready out of the box for your CERT or CSIRT to use. It was developed in cooperation with many top-notch security teams to ensure it meets the needs of incident response.