Tines offers two primary types of resources, each suited for different needs:
Text resources
Text resources are the simplest form; they're good for storing simple string values. They're perfect for:
Configuration values like API endpoints
Email addresses
Simple counters or flags
Single values that need to be referenced frequently
For example, a text resource called escalation_email might store: security-escalations@example.com.
Text resources are great for things like notification recipients that might change over time. Instead of updating every story when a team member changes roles, you can just update the resource once.
JSON resources
JSON resources store structured data in JSON format. They're ideal for:
Complex configuration settings
Lists of values
Nested data structures
Multiple related values that should be managed together
For example, a JSON resource called alert_config might store:
{
"escalation_email": "security-escalations@example.com",
"severity_threshold": 7,
"slack_channel": "#incident-response",
"enrichment_sources": ["VirusTotal", "AbuseIPDB", "Shodan"]
}JSON resources are incredibly versatile. Many teams use a single JSON resource to store all the configuration for a multi-step security alert enrichment process: endpoints, headers, team assignments, and severity thresholds all in one place. When they need to update the process, they just update that one resource!