How does the skill handle historical data time ranges?

It enforces the use of dynamic epoch timestamp calculations using current system time to ensure relative time queries (like 'last 24 hours') are always accurate.

How do I authenticate with the LimaCharlie API using this skill?

The skill guides you through using Organization API Keys to generate a JWT (JSON Web Token) via the LimaCharlie identity service, valid for one hour.

Can I use this skill to automate sensor isolation?

Absolutely. It includes specific SDK methods and REST endpoints for tasking sensors, including isolation and rejoins for incident response.

Does this skill support real-time event streaming?

Yes, it provides detailed implementation patterns for both Spout (pull-based HTTPS) and Firehose (push-based) to stream detections and telemetry.

LimaCharlie API Integrator

Name: LimaCharlie API Integrator
Author: tekgrunt

bytekgrunt

安全与测试

Integrate with the LimaCharlie SecOps platform using REST APIs, Python SDK, or Go SDK for programmatic sensor management and data streaming.

关于

The LimaCharlie API Integrator skill provides comprehensive technical guidance for developers and security engineers building custom integrations on the LimaCharlie platform. It covers essential programmatic workflows including JWT-based authentication, sensor tasking, and the creation of detection and response (D&R) rules. With specialized support for both Python and Go SDKs, the skill helps users implement real-time event streaming via Spout or Firehose and ensures best practices for dynamic timestamp calculation when querying historical telemetry or artifacts.

主要功能

Comprehensive Python and Go SDK implementation patterns
Real-time event streaming via Spout and Firehose
Dynamic epoch timestamp calculation for accurate historical queries
JWT authentication and granular API key management guidance
Programmatic sensor tasking and isolation controls
0 GitHub stars

使用场景

Streaming real-time detection logs to external SIEMs or data lakes
Building custom security automation workflows and SOAR playbooks
Automating large-scale sensor tagging and response actions during incidents

关于

主要功能

Comprehensive Python and Go SDK implementation patterns
Real-time event streaming via Spout and Firehose
Dynamic epoch timestamp calculation for accurate historical queries
JWT authentication and granular API key management guidance
Programmatic sensor tasking and isolation controls
0 GitHub stars

使用场景

Streaming real-time detection logs to external SIEMs or data lakes
Building custom security automation workflows and SOAR playbooks
Automating large-scale sensor tagging and response actions during incidents