Who.
Identities, actors and the systems involved.
THE MSP INCIDENT EVIDENCE PLATFORM
When everything
moves fast.
Keep the proof.
Reconstruct the incident. Understand customer impact. Bring the evidence, decisions and obligations together in one defensible record.
Read-only integrations. Preserved source evidence. Human decisions.
IDENTITY Entra
DETECTION Sentinel
SERVICE ConnectWise
ENDPOINT NinjaOne
170TARV / BLACKBOXEvidence.
Connected.
Connected.
CAPTURE → PRESERVE → VERIFY
CLARITY UNDER PRESSURE
The incident is moving.
Your record should hold.
170tarv brings scattered source records into a traceable evidence chain, so your team can investigate, make decisions and explain what happened.
What.
Events, alerts, actions and changes.
When.
Source time, capture time and decision time.
Where.
Your MSP, its assets and affected customers.
Why.
Human decisions, context and obligations.
Proof.
Preserved payloads, hashes and provenance.
ONE RECORD. FOUR CUSTOMER VIEWS.
From the big picture
to the captured byte.
Command for leadership. Incident Command for response. Assurance for obligations and proof. Workspace Admin for service visibility, billing and requests.
Follow the evidence →01Capture unchanged source payload↓
02Hash and record provenance↓
03Reconstruct the incident↓
04Export a verifiable bundle↓
CORE OR BLACKBOX