LimaChalrie supplies all the tools to run an MSSP or SOC as well as providing API’s that allow users to build and monetize their own products.
This site is the host of all LimaCharlie documentation.
To skip all of the details and get set up with endpoint detection and response capability you can follow our quick start instructions.
Get a high-level overview of the LimaCharlie platform and get setup with a variety of simple detction and response scenarios by taking the free online course.
A high-level overview of LimaCharlie's core concepts and features can be found here
LimaCharlie employs a fine-grained permission scheme across the API and user accounts. A detailed overview can be found here.
The LimaCharlie agent - or sensor - is fully interactive and can monitor over 70 different event types. The agent is written in C and then compiled for each different platform and architecture it runs on which means is that it has true feature parity across all operating systems. A detailed overview can be found here.
LimaCharlie provides standalone tools for security proffesionals to get started hunting out of the box but at its heart it is a toolbox for builders. This section of the documentation is a place where developers can find the resources they need to build and monetize their own products. A detailed overview can be found here.
Education and open data is at the heart of LimaCharlie. To ensure that users get up to speed quickly - and make the most of the platform - LimaCharlie provides a host of educational resources. A detailed overview can be found here.
LimaCharlie is information security tools and infrastructure. Infrastructure to support any scale and tools to help analysts get started hunting as they grow into the platform. A detailed overview can be found here.
LimaCharlie offers additional free and paid integrated services through it's Add-Ons Marketplace. A detailed overview can be found here.
The data produced by the LimaCharlie endpoint is under complete control of the user. LimaCharlie provides extensive storage and search options as part of its core offering but makes the full telemetry stream availble to users. A detailed overview can be found here.
By default LimaCharlie stores a full year of searchable endpoint telemetry as well as log files, binary assets and more. A detailed overview can be found here.