Our LimaCharlie 101 session on July 22nd covers the full arc, from agent deployment to automated response. You'll deploy EDR agents, write detection and response rules, and bring threat intelligence into your workflow live, in real time, on the platform. limacharlie.wistia.com/live/events/...

We're partnering with @bhinfosecurity.bsky.social and @digitaldefenseinstitute.com for a free Black Hat workshop. Spend the afternoon with @eric.zip and @whit.zip working through detection engineering, adversary analysis, and IR on real telemetry, every action auditable. luma.com/black-hat-he...

Not every malware sample deserves analyst time. If it isn't packed, isn't encrypted, and doesn't have anything novel in it, Claude Code can handle the analysis. In a recent workshop, Chris Botelho builds out that workflow start to finish. Training access: training.limacharlie.io/courses/cc6c...

No slides. No vendor pitch. Just six hours of hands-on building at Black Hat with @bhinfosecurity.bsky.social and @digitaldefenseinstitute.com. > Multi-agent hunting pipelines > Detection engineering on live infrastructure > Adversary analysis and IR with real telemetry luma.com/black-hat-he...

Demo today: Grid by LimaCharlie reducing service delivery costs in a real environment > Grid connects to your existing stack and handles repetitive review work > Every decision is logged with a full audit trail > Cost reduction starts on day one and scales limacharlie.wistia.com/live/events/...

Most MSSPs treat analyst review time as a fixed cost. Approval queues get absorbed into the service and nobody bills it back. Grid handles that work automatically, across your existing stack, with a full audit trail. Join us for a live demo: limacharlie.wistia.com/live/events/...

The second you install our plugin in Claude Code, it knows everything about the platform and can act directly. > Generate a MITRE ATT&CK coverage report > Query telemetry across your environment > Write/deploy detection rules > Deploy sensors to new systems training.limacharlie.io/courses/e29e...

This week, Defender Fridays ends where it began — with creator @eric.zip, joining us for a final conversation on how he's actually using AI in the SOC. 100+ sessions. A community that showed up every single week. Over two years of defenders showing up for defenders. Thank you for being part of it.

Tomorrow, Carlo Anez, Founder at IgniteCyber Academy and DEF CON Training Instructor, joins us for a conversation on AI-assisted SOC training. They'll dig into building blue team skills using open-source labs, MITRE ATT&CK, and real-world defender workflows. info.limacharlie.io/defender-fri...

Most MSSPs run compliance the same way: manual audits, spreadsheets, repeat. We're showing how our compliance tooling changes the workflow. Run gap analysis, get continuous control classification, and produce structured audit evidence without the overhead. limacharlie.wistia.com/live/events/...

Today's session is live walking through a full dashboard build with Claude Code. > Fetch real-time data from LC API endpoints > Use Claude Code to generate and refine dashboard code > Package and deploy your dashboard as a self-contained application limacharlie.wistia.com/live/events/...

Our API-first architecture gave us an advantage when AI arrived. Because every platform function is exposed through the API, Claude Code can be taught everything it needs to operate your SOC, how to write detections, query telemetry, deploy sensors, and more. Learn more: limacharlie.io

Today on Defender Fridays, we're joined by Chris Sanders, Founder at Applied Network Defense and the Rural Technology Fund, for a conversation on how analysts use cognitive reasoning in investigations. Tune in live: info.limacharlie.io/defender-fri...

Our next workshop is focused on building custom, stand-alone dashboard applications with Claude Code. This session walks through pulling real-time data from the API, generating frontend/backend code, and packaging the result as a self-contained application. limacharlie.wistia.com/live/events/...

The reason AI agents work differently in LimaCharlie comes down to how the platform was built. Because every capability was built to be accessed programmatically, achieving full AI parity through the MCP and CLI was a natural next step. A human analyst and an LLM now operate with the same access.

@eric.zip connected Claude Code to LimaCharlie and ran a live Cobalt Strike investigation. Every step was logged, auditable, and human-authorized. The ASW gives AI agents full platform access. For MSSPs, that means scaling operations without scaling headcount. limacharlie.io/blog/when-cl...

Today: Analyzing Real Malware with Claude Code and LimaCharlie. > Analyze an unknown binary and extract indicators > Use Claude Code to accelerate interpretation of configuration details and behaviors > Write and tune detection rules against runtime behavior limacharlie.wistia.com/live/events/...

Tomorrow, Ken Westin, Senior Solutions Engineer at LimaCharlie, joins Defender Fridays to share his AI story: a deliberate journey that deepened his sense of what the technology is truly capable of. Join us live: info.limacharlie.io/defender-fri...

Treat Claude Code like a junior analyst, not an autonomous agent. In our AI SecOps Workshop, attendees used Claude Code to deploy EDR agents to EC2 instances, pull in CloudTrail logs, and push detection rules from our partner Soteria, all from the terminal. www.youtube.com/watch?v=II_e...

On May 6th, we're hosting a hands-on malware analysis workshop with Claude Code. You will extract indicators using the LCRE tool, execute the sample in a sandboxed VM, and use what they observe to write and validate detection rules based on runtime behavior. limacharlie.wistia.com/live/events/...

Tomorrow on Defender Fridays, Katherine McNamara, Cybersecurity Technical Solutions Architect at Cisco, joins us to discuss how AI and ML adoption in enterprise infrastructure has expanded the attack surface for AI-driven systems. info.limacharlie.io/defender-fri...

Most AI SecOps vendors ship a fixed platform: the architecture, the workflows, the pricing model. Our position has always been the opposite. Build the capabilities and the value first, then give operators the freedom to modify, assemble, and build on top of them however their operation requires.

Exciting guest this week for #ThursDef! Founder & CEO of @limacharlie.io, @maximelb.bsky.social will join us tomorrow at 12:30pm CT to discuss Managing Security Infrastructure at Scale. Sign up at thursdef.com t#ThursDef join us via Zoom for guaranteed great conversation!

Tomorrow, Jeff McJunkin, Founder of Rogue Valley Information Security, joins Defender Fridays to talk AI-powered code scanning for vulnerabilities. He'll walk through real examples including using AI to find privilege escalation bugs in the Linux kernel. info.limacharlie.io/defender-fri...

Tomorrow's workshop covers how to use Claude Code to deploy agents, write detections, and surface cloud issues before escalation. Learn how to handle all of it using natural language, turning reactive cloud security tasks into proactive workflows. limacharlie.wistia.com/live/events/...

Cloud security ops still rely heavily on manual overhead: deploying agents, building detections, chasing down issues before they become incidents. The 2nd session in our AI SecOps Workshop Series covers how Claude Code and LimaCharlie can take on that load. limacharlie.wistia.com/live/events/...

How do you know your AI agents are actually correct? Tomorrow, Dylan Williams of Spectrum Security joins Defender Fridays to dig into that exact problem: self-evaluating agents, trajectory analysis, and what improvement looks like in production. info.limacharlie.io/defender-fri...

Today we're showing what running a SOC on Claude Code looks like in production. We will be walking through live demos inside the Agentic SecOps Workspace: > Detection triage end-to-end > Composable agent stacking > The lc-agents repo limacharlie.wistia.com/live/events/... #ai #cybersecurity

Two days until we show what a SOC built on infrastructure-as-code actually looks like in production. This Wednesady, LimaCharlie CEO covers the composable agent architecture, the SOC as IaC model, and the open-source lc-agents repo. limacharlie.wistia.com/live/events/... #secops #ai #mssp

Josh Neil, Co-founder of Alpha Level, joins Defender Fridays today to talk AI in the SOC. A more sophisticated industry understanding is unfolding, tune in and be part of it. info.limacharlie.io/defender-fri... #secops #ai #defenders

One message came through clearly at RSAC: security teams want infrastructure they can control, extend, and own. Not another black box AI SOC product. On April 8th we will demo what it actually looks like to run full SOC operations on Claude Code. limacharlie.wistia.com/live/events/... #secops #ai

If you're at RSAC this week, we'd love to connect! Where to find us: > Visit Booth #1268 in the South Expo Hall for a TRON VR experience and a hands-on demo! > Join us for a happy hour tomorrow with our friends at Alpha Level. RSVP: luma.com/rsac-speakea... #RSAC #cybersecurity #secops

Andrew Cook, CTO of Recon InfoSec, joins Defender Fridays today to talk about what it means to build a strong security team and why hiring builders is always a good bet. Tune in live at 10:30am PT / 1:30pm ET: info.limacharlie.io/defender-fri... #defenders #secops #infosec

LimaCharlie's refreshed docs are fully open and structured for AI readability. No login, no subscription. LLMs and coding assistants can traverse it directly, which means agents building on the platform have accurate, accessible context without a human having to paste it in. docs.limacharlie.io

We're co-hosting a speakeasy social with our friends at Alpha Level at RSA next week. Wednesday, March 25 from 6-9PM at Bourbon & Branch, a genuine speakeasy that ran illegally through Prohibition, just blocks from Moscone. luma.com/rsac-speakea... #RSAC #cybersecurity #infosec

The first AI SecOps Workshop session is tomorrow! > Draft D&R rules from threat intelligence or observed behaviors > Tune existing rules using alert data to reduce false positives > Validate new and modified rules against simulated data limacharlie.wistia.com/live/events/... #claudecode #ai

The ASW completes Azure Activity Log integration in minutes, handling technical obstacles autonomously. The result: cloud integrations that adapt and self-correct instead of failing and requiring manual intervention. Book a demo: limacharlie.io/demo-request #ai #secops #agenticai #azure

MSSPs onboarding new customers face a fragmented process where EDR deployment, cloud log ingestion, and data source configuration each require separate workflows across multiple sessions and tools. The ASW executes complete onboarding as a unified workflow in minutes. limacharlie.io #ai #secops

Our AI SecOps Workshop Series kicks off Mar 18th with a session on detection engineering using Claude Code. You'll learn to generate D&R rules, tune existing rules using historical alert data, and validate against simulated data before pushing to production. limacharlie.wistia.com/live/events/...

For MSSPs, standing up a configured tenant takes hours before a client environment is useful. Claude Code and LimaCharlie compress that entire process into a single prompt. Every configuration is versioned from day one and replicable across every subsequent client. limacharlie.io/blog/spin-up...

While defenders debate AI, attackers are already using it at scale. In this Intel Chat, Chris and Matt discuss how a Russian-speaking threat actor used generative AI to compromise over 600 Fortinet FortiGate firewalls across 55 countries in just two months. limacharlie.io/podcast?wcha... #ai

Most security teams spend days on MITRE ATT&CK coverage analysis. The ASW does it in minutes through natural language prompts. The reason AI can operate at that speed: LimaCharlie's API covers 100% of platform functions. Full breakdown: limacharlie.io/blog/mitre-a... #ai #mssp

Integrating AWS CloudTrail logs into your security stack involves adapters, credentials, bucket configurations, and sensor deployments. ASW completes this in minutes. The agent handles authentication, identifies the right adapter, configures cloud sensors, and establishes continuous log collection.

David Burkett is back on Defender Fridays tomorrow. David is a Cloud Security Researcher at Corelight. This time he's talking about maximizing the value of IoCs and what's ahead for threat intelligence. Join us live Friday at 10:30am PT. info.limacharlie.io/defender-fri... #cybersecurity

The Agentic SecOps Workspace (ASW) generates complete asset inventory with coverage analysis in minutes. Security teams gain immediate visibility into monitored assets, coverage gaps, and blind spots. Book a demo to learn more: limacharlie.io #ai #secops #cybersecurity #assetmanagement

John V., AI risk, safety, and security at the Institute for Security and Technology, is joining Defender Fridays today. John's work spans AI red teaming, adversarial machine learning, AI evals and validation, and AI risk assessment. info.limacharlie.io/defender-fri... #ai #cybersecurity #infosec

The Agentic SecOps Workspace (ASW) executes parallel IOC hunts across all tenants in minutes. Security teams see IOC presence across their entire customer base from a single query. Learn more: limacharlie.io #ai #secops #mssp #threatintelligence

The recent attention on OpenClaw confirmed what we've known: unrestricted AI operations are extremely powerful and incredibly risky. Viberails changes that equation. The platform operates with ~50ms round-trip latency and is open source and free to use. limacharlie.io/blog/viberai... #ai

We're heading to @wildwesthackinfest.bsky.social this week as a gold sponsor. Stop by our booth to see the Agentic SecOps Workspace in action! Wed. - Sponsor Stampede at Henry's Tavern Thurs., 2pm - AI in the SOC Office Hours Fri., 9am - AI Beyond Triage and Hunting session #WWHF #MileHigh2026

Alert tuning typically happens in stages across multiple sessions. Each step requires analyst time and context switching. The ASW executes the complete workflow in minutes. One request handles complete execution from investigation through deployment. www.youtube.com/watch?v=x5UF... #ai #secops