FIR Fast IR

fir → incident create

Manages incidents in FIR (Fast Incident Response) of CERT Société Générale, the lightweight IR case management platform.

Run it when you want incident management with the lightweight platform: FIR (Fast Incident Response) logs the incident (type, severity, description) and manages the workflow — incident stages, events, notes, artifacts. It is the incident management platform of CERT Société Générale: the IR workflow in the web platform (and via the API). In the SOC, FIR is the lightweight case management: the incident created and the workflow stages managed by the team.

Do not use it without the platform: FIR requires deployment (Django) — the infrastructure is the requirement. And watch out: FIR is a classic platform (its development slowed compared to TheHive/IRIS): for new environments, TheHive/IRIS are the maintained options; FIR is the historical reference for lightweight management. The IR workflow (stages, events) is defined with the team. For interactive work, use the FIR interface; the API for programmatic operations.