LimaCharlie API Operations

概要

Serves as the required and exclusive gateway for all LimaCharlie operations. This skill delegates tasks to a specialized sub-agent, providing a structured and reliable interface to over 130 API functions. It is essential for a wide range of security tasks, including threat hunting with AI-assisted LCQL query generation, managing endpoint sensors, performing live response, and engineering detection and response rules.

主な機能

• Delegates all operations to a specialized sub-agent for reliable execution and handling of large results.
• Supports diverse security operations including live response, detection engineering, and sensor management.
• Enables parallel API calls by spawning multiple sub-agents simultaneously.
• Enforces best practices and mandatory workflows, such as AI-powered LCQL query generation.
• Provides access to over 130 LimaCharlie API functions for comprehensive platform control.
• 1 GitHub stars

ユースケース

• Conducting threat hunts by searching for IOCs, running LCQL queries, and analyzing historical detections.
• Managing endpoint sensors by listing them based on platform, applying tags, or performing network isolation.
• Performing live response actions on an endpoint, such as listing processes, browsing the filesystem, or running YARA scans.