DETAILS

http://code.google.com/p/perl-xml-iodef/updates/list

This module takes in and processes IODEF XML objects (pgp helps compress the xml FYI, keeps SMTP from breaking it up with \n's) and maps them to customfields who's description matches _IODEF_... (see etc/initialdata for an included example).

INSTALLATION

1. #> perl Makefile.PL
2. #> make
3. #> make install
4. #> make initdb
5. #> vi /opt/rt3/etc/RT_SiteConfig.pm

Set(@Plugins,(qw(RT::IODEF)));

6. #> /etc/init.d/httpd reload

FOR USE WITH RT+IR (Incident Response Plugin)

Apply the following to your 'Incident Reports' queue:
       
    Description => 'zIODEF_ProcessMessage'
    Queue       => ['Incident Reports']
    ScripCondition  => 'On Create'
    ScripAction => 'IODEF ProcessMessage'
    Template    => 'Blank'