caseScope

A case-centric investigation workflow for collected evidence

One workspace for post-collection investigation. Purchase on what is available now. Subscribers receive later releases during the term.

Available now current production release Preview/Beta usable, may change In development not sold as available Planned no committed date
Available now

Clients, cases, roles

Keep timezone and ownership on the case. Tour step 1

Available now

Managed ingest

Staging, parse, publish, recovery. Tour steps 2–3

Available now

Hunt and inspect

Host, user, time, source. Tour step 4 · Evidence

Available now

Process, memory, PCAP lanes

Special files keep special workflows. Workflow

Available now

Deterministic analysis

Runs with AI off. Tour step 5

Available now

Analyst-controlled findings

Automation proposes; people dispose. Sample report

Available now

Reports and retained files

CaseScope stores and assembles context. Analysts still write findings. Sample

Available now

AI and intel as settings

Off, local, or external. Egress

Preview/Beta

Investigation threads

In progress. Not a shipped graph product.

In development

Evidence graph

Not available now.

In development

Coverage matrix

Not available now.

In development

Saved hunts

Not available now.

Planned

Public parser SDK

No committed date.

Planned

Cloud/SaaS offline imports

Not live monitoring. Not available now.

Planned

Reproducibility center

Not available now.

Northwind demonstration views

Same case as the homepage. Synthetic UI until captures from CaseScope 4.26.13 replace them.