LimaCharlie

LimaCharlie is presented as an EDR solution that helps security teams make faster, confident decisions, by collecting data from any source and contextualizing it to improve threat detection and triage. Users can respond to threats at speed and create automations with LimaCharlie’s Detection, Automation & Response Engine.

LimaCharlie’s detection, automation, and response engine allows security teams to analyze endpoint events against thousands of rules and trigger automated response actions based on the results. The platform also lets users write customized detection and response rules, and integrates with third-party threat intelligence and threat hunting platforms like AlienVault OTX, VirusTotal, MISP, and SnapAttack. This makes it possible to build sophisticated detection rulesets—in particular, ones that interpret the meaning of events in a wider context and support sophisticated practices like behavioral detection.