1

Intake

Open the client case with timezone and analysts. Client/case records organize work. That is not a claim of security-grade multi-tenancy or hard tenant isolation unless separately implemented and tested.

2

Process supported artifacts

KAPE/Velociraptor packages, EDR exports, RMM, firewall, optional memory or PCAP.

3

Record decisions

Accept IOCs and findings. AI can stay off when the client forbids model egress.

4

Export the package

A reviewable report that traces findings to supplied evidence and states gaps.

Hosting CaseScope for many customers requires an MSP/enterprise agreement, not a stretched evaluation or single-organization annual license used as a service.