170tarv.

HOW 170TARV WORKS

From scattered signals.
To a record that holds.

When an incident hits your MSP, bring the evidence, people and decisions into focus. Follow the chain from the source record to a verifiable case.

See 170tarv in action →Follow the process ↓

Your existing tools. Least-privilege access. Preserved evidence.

170TARV / THE INCIDENT RECORDILLUSTRATIVE

Every step.
A traceable connection.

EntraSentinelPSA / RMM Blackbox
  1. Source evidence capturedRaw payload · hash · provenance
    01
  2. The incident takes shapeIdentity · timeline · customer impact
    02
  3. Decisions stay attributableHuman assessment · clocks · obligations
    03
  4. The record travels with youExport · manifest · verification
    04

Illustrative workflow · no live customer data

FOUR STEPS. ONE CONTINUOUS RECORD.

Clarity is a process.

Capture first. Interpret carefully. Keep the proof connected.

01 /

Connect.

A least-privilege view into your existing stack.

Your administrators approve vendor access. 170tarv manages read-only collection from Entra and Sentinel; Blackbox adds ConnectWise PSA and NinjaOne RMM.

02 /

Preserve.

Keep the original. Make every transformation traceable.

Source payloads are captured unchanged, hashed and timestamped with provenance. Normalised records are stored separately and linked back to the captured bytes.

03 /

Reconstruct.

Bring the people, events and customer impact together.

Investigators work from linked identities, assets and evidence. Human decisions, awareness timestamps and reporting clocks stay visible in the case record.

04 /

Verify.

A record that can stand outside the platform.

Core provides signed readiness exports. Blackbox adds richer reconstruction bundles and independent verification packages that can reveal alteration after capture.

THE QUESTIONS THAT MATTER

Who. What. When.
Where. Why. Proof.

Command gives leadership an overview. Incident Command supports reconstruction. Assurance connects obligations and evidence. Workspace Admin keeps service health, billing and requests visible.

WhoIdentities, actors and roles
WhatEvents, alerts and actions
WhenSource, capture and decision times
WhereAssets and customer environments
WhyHuman notes and decisions
ProofCaptured bytes and provenance

INTEGRITY HAS A PRECISE MEANING

Proof of preservation.
Room for human judgment.

Cryptography can demonstrate that evidence has not changed after capture. It cannot prove that an upstream system was truthful or complete. Your team remains responsible for impact assessments, legal interpretation and external reporting decisions.

Read how evidence verification works →

CORE OR BLACKBOX

Choose the depth
your MSP needs.

Explore the plans →Request a demo →