PIR is part of ITSM - it comes from the Major Incident Management plugin. It is also available as part of SecOps. 

They are generated automatically when a Major Incident is resolved. The Post Incident Review table is called sn_sow_inc_post_incident_review. It stores all the PIRs as they are created.