show me lce
With so many features and flexibility it's difficult to get a good handle on what LCE can do. So here we will try to show you examples of some of the powerful things it can do for you.
Here's what you need to know about LimaCharlie Enterprise
We don't force you into any complex security ecosystem, processing technologies and storage technologies.
You need a realtime endpoint telemetry, detection and response capability. We provide you with the most potent drop-in endpoint capability out there and we get out of the way!
Security is complex enough, we'll make sure your endpoint solution isn't while making sure it stays powerful.
LCE doesn't force you into any one specific data storage technology and doesn't do retention. This means that although your data transits through LCE, it never stays there, limiting the risk of possible exposure.
You control your data.
Export bulk events to an S3 bucket for long term retention and send the detections to your Spunk cluster, mix and match as you want.
FLIGHT DATA RECORDER
It's worth pointing our, the Flight Data Recorder capability is reason enough. It provides you with a huge number of possible events .
Chose which events you want to get and when, all in easy to integrate JSON format.
DETECTION & RESPONSE RULES
The D&R rules are an extremely powerful tool to help you automate the detection and response process to your organization.
Leverage the tagging of sensors, thread feeds and any characteristic of incoming events to create customized detections.
Take action in realtime, execute a command on the sensor, isolate the host from the network, kill processes, gather additional data all through the simple interface.
REST INTERFACE AUTOMATION
LCE exposes a well documented REST interface that allows you to do everything. All features are available, from sensor tagging to creation of Detection & Response rules to interactive commands to the sensors.
There is no black-box inaccessible magic, you have full control. Automate and integrate with other systems and feeds like no other tool can.
Some of the great customers using LimaCharlie Enterprise: