{"workspace":{"id":11780,"name":"LimaCharlie","description":null,"slug":"refractionpoint","createdAt":"2020-10-01T00:50:12.024368+00:00","updatedAt":"2021-02-23T22:31:55.854645+00:00","snapshotCount":195,"logoUrl":"https://storage.googleapis.com/lc-edu/content/images/logos/logo.png","domain":"doc.limacharlie.io","homeContent":"\n\n# \n\n $\"LimaCharlie.io$ \n \n \nLimaChalrie supplies all the tools to run an MSSP or SOC as well as providing API’s that allow users to build and monetize their own products.\n\nThis site is the host of all LimaCharlie documentation.\n \n## Quick Start\nTo skip all of the details and get set up with endpoint detection and response capability you can follow our [quick start instructions](docs/documentation/docs/lcc_quick_start.md).\n\n## Deep Dive\nGet a high-level overview of the LimaCharlie platform and get setup with a variety of simple detction and response scenarios by taking the [free online course](https://edu.limacharlie.io/).\n\n## Core Features\nA high-level overview of LimaCharlie's core concepts and features can be found [here](docs/documentation/docs/features.md)\n\n# Platform\n\n $\"LimaCharlie.io$ \n\n## lc-agent\n\nThe LimaCharlie agent - or sensor - is fully interactive and can monitor over [70 different event types](docs/documentation/docs/events.md). The agent is written in C and then compiled for each different platform and architecture it runs on which means is that it has true feature parity across all operating systems. A detailed overview can be [found here](docs/documentation/docs/lc-agent.md).\n\n* [Architecture & OS Support](docs/documentation/docs/lc-agent.md##architecture--os-support)\n* [Live View](docs/documentation/docs/lc-agent.md#live-view)\n* [Installing the Agent](docs/documentation/docs/lc-agent.md#installing-the-agent)\n* [Connectivity](docs/documentation/docs/lc-agent.md#connectivity) \n\n $\"LimaCharlie.io$ \n\n## lc-storage\n\nBy default LimaCharlie stores a full year of searchable endpoint telemetry as well as log files, binary assets and more. A detailed overview can be [found here](docs/documentation/docs/lc-storage.md).\n\n* [Telemetry Storage](docs/documentation/docs/lc-storage.md#telemetry-storage)\n* [Artifact Collection](docs/documentation/docs/lc-storage.md#artifact-collection)\n* [Historical Threat Hunting](docs/documentation/docs/lc-storage.md#historical-threat-hunting)\n\n# Access\n\n $\"LimaCharlie.io$ \n\n## lc-output\n\nThe data produced by the LimaCharlie endpoint is under complete control of the user. LimaCharlie provides extensive storage and search options as part of its core offering but makes the full telemetry stream availble to users. A detailed overview can be [found here](docs/documentation/docs/lc-output.md).\n\n* [Outputs](docs/documentation/docs/lc-output.md#outputs)\n* [Integrations](docs/documentation/docs/lc-output.md#integrations)\n\n $\"LimaCharlie.io$ \n\n## lc-rbac\n\nLimaCharlie employs a fine-grained permission scheme across the API and user accounts. A detailed overview can be [found here](docs/documentation/docs/lc-access.md).\n\n* [Analyst Permissions](docs/documentation/docs/lc-access.md#analyst-permissions)\n* [Organization Groups](docs/documentation/docs/lc-access.md#organization-groups)\n* [Programmatic Access](docs/documentation/docs/lc-access.md#programatic-access)\n\n# Hunting \n\n $\"LimaCharlie.io$ \n\n## lc-hunt \n\nLimaCharlie is information security tools and infrastructure. Infrastructure to support any scale and tools to help analysts get started hunting as they grow into the platform. A detailed overview can be [found here](docs/documentation/docs/lc-hunt.md).\n\n* [Detecion & Response Rules](docs/documentation/docs/lc-hunt.md#detection--response-rules)\n* [Targets](docs/documentation/docs/lc-hunt.md#targets)\n* [Search & Historical Threat Hunting](docs/documentation/docs/lc-hunt.md#search--historical-threat-hunting)\n* [Community Resources](docs/documentation/docs/lc-hunt.md#community-resources)\n\n# Resources \n\n $\"LimaCharlie.io$ \n\n## lc-marketplace \n\nLimaCharlie offers additional free and paid integrated services through it's Add-Ons Marketplace. A detailed overview can be [found here](docs/documentation/docs/lc-marketplace.md).\n\n* [Add-Ons & Subscriptions](docs/documentation/docs/lc-marketplace.md#add-ons--subscriptions)\n* [Developing Products](docs/documentation/docs/lc-marketplace.md#developing-products)\n* [Monetizing Products with LimaCharlie](docs/documentation/docs/lc-marketplace.md#monetizing-products-wit-limacharlie)\n* [Developer Grant Program](docs/documentation/docs/lc-marketplace.md#developer-grant-program)\n\n\n $\"LimaCharlie.io$ \n\n## lc-code\n\nLimaCharlie provides standalone tools for security proffesionals to get started hunting out of the box but at its heart it is a toolbox for builders. This section of the documentation is a place where developers can find the resources they need to build and monetize their own products. A detailed overview can be [found here](docs/documentation/docscs/lc-code.md).\n\n* [Educational Resources](docs/documentation/docs/lc-code.md#educational-resources)\n* [API, CLI & SDK](docs/documentation/docs/lc-code.md#api-cli--sdk)\n* [Codelabs & Recipes](docs/documentation/docs/lc-code.md#codelabs--recipes)\n* [Marketplace](docs/documentation/docs/lc-code.md#marketplace)\n\n $\"LimaCharlie.io$ \n\n## lc-edu\n\nEducation and open data is at the heart of LimaCharlie. To ensure that users get up to speed quickly - and make the most of the platform - LimaCharlie provides a host of educational resources. A detailed overview can be [found here](docs/documentation/docs/lc-edu.md).\n\n* [Course Material](docs/documentation/docs/lc-edu.md#course-material)\n* [Video Series](docs/documentation/docs/lc-edu.md#video-series)\n* [Edu Doc](docs/documentation/docs/lc-edu.md#edu-doc)","hidePoweredBy":false,"hideSignIn":false,"googleTagManager":null,"creatorId":27762,"integrations":[{"id":46179,"name":null,"enabled":true,"config":{},"allowUserLogin":true,"allowUserRegister":true,"integration":{"id":9,"kind":"bitbucket_cloud","shortcode":"bbc","name":"Bitbucket Cloud","config":{"apiUrl":"https://api.bitbucket.org/2.0","hostUrl":"https://bitbucket.org","clientId":"FJt5Jb9DwW8K4YWGfE","redirectUrl":"https://stoplight.io:443/oauth/callback"},"__typename":"sl_integrations"},"__typename":"sl_workspace_integrations"},{"id":46176,"name":null,"enabled":true,"config":{},"allowUserLogin":true,"allowUserRegister":true,"integration":{"id":1,"kind":"builtin","shortcode":"sl","name":"Email","config":{},"__typename":"sl_integrations"},"__typename":"sl_workspace_integrations"},{"id":46177,"name":null,"enabled":true,"config":{},"allowUserLogin":true,"allowUserRegister":true,"integration":{"id":2,"kind":"github","shortcode":"gh","name":"GitHub","config":{"apiUrl":"https://api.github.com","hostUrl":"https://github.com","clientId":"14b4eb468fc1419a5290","redirectUrl":"https://stoplight.io:443/oauth/callback"},"__typename":"sl_integrations"},"__typename":"sl_workspace_integrations"},{"id":46178,"name":null,"enabled":true,"config":{},"allowUserLogin":true,"allowUserRegister":true,"integration":{"id":3,"kind":"gitlab","shortcode":"gl","name":"GitLab","config":{"apiUrl":"https://gitlab.com/api/v4","hostUrl":"https://gitlab.com","clientId":"ac92ea2ad339f25ae1f3264c2d851c8eb23f84e8ea5ec297d3504dc735488238","redirectUrl":"https://stoplight.io:443/oauth/callback"},"__typename":"sl_integrations"},"__typename":"sl_workspace_integrations"}],"myPermissions":[],"billingAccount":{"id":11763,"status":"active","stripeCustomerId":"cus_I7lDq4sMBQUei8","includedMembers":5,"billingProduct":{"id":2,"name":"starter","description":"Starter","priority":10,"flatFeePlanId":"plan_HDt3STi64FxevL","userFeePlanId":"plan_HDt52AXIFbZb1K","__typename":"sl_billing_products"},"__typename":"sl_billing_accounts"},"features":[{"id":143522,"maxQuantity":90,"feature":{"id":1,"name":"changelogs","type":"limit","__typename":"sl_features"},"__typename":"sl_workspace_features"},{"id":143523,"maxQuantity":null,"feature":{"id":2,"name":"custom_domain","type":"toggle","__typename":"sl_features"},"__typename":"sl_workspace_features"},{"id":143526,"maxQuantity":null,"feature":{"id":3,"name":"members","type":"limit","__typename":"sl_features"},"__typename":"sl_workspace_features"},{"id":143525,"maxQuantity":10000,"feature":{"id":4,"name":"hosted_mocking","type":"limit","__typename":"sl_features"},"__typename":"sl_workspace_features"},{"id":143528,"maxQuantity":50,"feature":{"id":5,"name":"projects","type":"limit","__typename":"sl_features"},"__typename":"sl_workspace_features"},{"id":143524,"maxQuantity":null,"feature":{"id":6,"name":"custom_theme","type":"toggle","__typename":"sl_features"},"__typename":"sl_workspace_features"},{"id":143527,"maxQuantity":null,"feature":{"id":8,"name":"multi_branch","type":"toggle","__typename":"sl_features"},"__typename":"sl_workspace_features"},{"id":143529,"maxQuantity":null,"feature":{"id":9,"name":"whitelisted_domains","type":"toggle","__typename":"sl_features"},"__typename":"sl_workspace_features"},{"id":143530,"maxQuantity":null,"feature":{"id":17,"name":"google_tag_manager","type":"toggle","__typename":"sl_features"},"__typename":"sl_workspace_features"}],"usage":{"projectCount":4,"memberCount":5,"guestCount":0,"userCount":5,"billingIncludedMemberCount":5,"billingAdditionalMemberCount":0,"__typename":"sl_workspace_usage"},"theme":{"color-accent":"#509cde","color-primary":"#3889c7","color-on-sidebar":"#edf7ff","color-sidebar-bg":"#060606","color-sidebar-border":"#060606"},"__typename":"sl_workspaces"}}