See what a professional incident evidence pack looks like
Request a sample CasePack evidence pack or book a 20-minute workflow review to see how CasePack fits next to your PSA, SIEM, EDR, or existing incident process.
Works beside your PSA
Turn Autotask incident tickets into structured evidence packs
CasePack helps MSPs using Autotask-style PSA workflows document security incidents, collect evidence, build timelines, generate reports, and export client/auditor-ready evidence packs.
Keep Autotask for tickets. Use CasePack for the incident record.
Autotask can remain the system for ticket operations, service delivery, assignments, queues, and client work management. CasePack is designed for the incident evidence workflow that ticketing systems often do not handle cleanly:
- incident documentation
- evidence vault
- timeline events
- NIS2 milestone tracking where needed
- client-ready reports
- PDF/ZIP evidence pack exports
- tenant-scoped audit log
Autotask-style workflow with CasePack
- 1
Ticket is created in Autotask
A security event becomes a ticket through client contact, monitoring, EDR/SIEM escalation, or internal triage.
- 2
CasePack receives the incident via webhook
Use CasePack webhook intake to create an incident in the right tenant workspace. For Autotask payloads, CasePack maps common fields like title to incident title, description to incident description, and priority to severity, with common mapping such as 1 = Critical, 2 = High, 3 = Medium, and 4+ = Low.
- 3
Evidence is collected in one incident workspace
Upload screenshots, logs, PDFs, email exports, IOCs, ticket exports, and other relevant artifacts.
- 4
The response timeline is built as work happens
Document containment, eradication, recovery, decisions, notes, and handover information.
- 5
Reports and evidence packs are generated
Create reports and export evidence packs for clients, insurers, auditors, or internal post-incident review.
Why MSPs should not rely only on ticket exports
A ticket export can show work history, but it often does not provide a polished incident package. A strong incident package should include:
- concise summary
- timeline
- evidence index
- root cause and lessons learned
- impact and remediation
- client-facing recommendations
- supporting artifacts
- audit history
CasePack gives MSPs a structured place to create that package without abandoning the PSA.
Webhook setup summary
- 1
In CasePack, open the tenant that represents the client/workspace
- 2
Create a new webhook
- 3
Select Autotask as provider
- 4
Copy the generated webhook URL
- 5
Configure the Autotask-side automation or integration to send incident payloads
- 6
Test with a low-severity incident before production use
Security note: The generated webhook URL contains a secret token. Treat it as sensitive.
Add audit-ready incident packaging to your Autotask workflow
Use Autotask for ticket operations and CasePack for the structured incident evidence package your clients, auditors, or internal reviewers need.
Frequently asked questions
No. CasePack complements Autotask-style PSA workflows by adding incident evidence collection, timelines, reports, audit logs, and exports.
CasePack supports webhook intake. Autotask-style payloads can create incidents in a tenant workspace.
CasePack documentation describes mapping title to title, description to description, and priority to severity using common priority mapping.
Yes. Many MSPs can keep routine service work in the PSA and use CasePack for security incidents or events that require formal evidence packaging.
No. Autotask and Kaseya are third-party products/trademarks of their respective owners. CasePack is not affiliated with or endorsed by them.
Related pages
MSP Evidence PacksTurn scattered incident notes, logs, screenshots, and PSA tickets into client/auditor-ready evidence packs for MSP security incidents.Client-Ready ReportsGenerate professional client-ready incident reports from incident details, timelines, evidence, impact notes, remediation steps, and audit history.ConnectWiseUse CasePack with ConnectWise-style PSA workflows to turn tickets and alerts into incident timelines, evidence packs, reports, and audit-ready exports.HaloPSAUse CasePack with HaloPSA-style workflows to create structured incident records, timelines, evidence packs, reports, audit history, and exports.Sample Evidence PackRequest a sample CasePack incident evidence pack and see how MSPs can package timelines, evidence, reports, audit history, and client-ready outputs.
Autotask and Kaseya are trademarks of their respective owners. CasePack is not affiliated with or endorsed by Autotask or Kaseya.