# Latest

**URL:** https://community.limacharlie.com/latest.md

[Latest](https://community.limacharlie.com/latest.md) · [Categories](https://community.limacharlie.com/categories.md) · [Tags](https://community.limacharlie.com/tags.md)

---

## [Zero Trust Access](https://community.limacharlie.com/t/zero-trust-access/788)

<div class="topic-metadata">

**Author:** [@Timothy\_christ](https://community.limacharlie.com/u/Timothy_christ)\
**Replies:** 1\
**Last updated:** [September 24, 2026, 5:50pm UTC](https://community.limacharlie.com/t/zero-trust-access/788 "2026-09-24T17:50:14Z")

</div>

With Jev from TypeSafe AI. I think we can utilize it to run it against LC’s Raw Events, categorize them fast. Creating a feature similar with ThreatLocker. I’ve managed to set up a small test using LCQL and Jev, it ma…

---

## [US datacenter: endpoint sensors unable to connect (2026-09-19)](https://community.limacharlie.com/t/us-datacenter-endpoint-sensors-unable-to-connect-2026-09-19/787)

<div class="topic-metadata">

**Author:** [@system](https://community.limacharlie.com/u/system)\
**Replies:** 0\
**Last updated:** [September 19, 2026, 11:16pm UTC](https://community.limacharlie.com/t/us-datacenter-endpoint-sensors-unable-to-connect-2026-09-19/787 "2026-09-19T23:16:00Z")

</div>

This incident is being reported retroactively. Starting at approximately 21:50 UTC on 2026-09-19, endpoint sensors connecting to our US datacenter progressively lost their connection to the LimaCharlie cloud. By 22:08 U…

---

## [AI Workspace](https://community.limacharlie.com/t/ai-workspace/786)

<div class="topic-metadata">

**Author:** [@maximelb](https://community.limacharlie.com/u/maximelb)\
**Replies:** 0\
**Last updated:** [September 17, 2026, 4:11pm UTC](https://community.limacharlie.com/t/ai-workspace/786 "2026-09-17T16:11:04Z")

</div>

Introducing LimaCharlie Bots: your personal AI team, inside LimaCharlie We’re excited to announce LimaCharlie Bots, a new workspace in the AI Terminal where you build a team of AI bots that live in LimaCharlie and work a…

---

## [Per Sensor Telemetry Freshness](https://community.limacharlie.com/t/per-sensor-telemetry-freshness/785)

<div class="topic-metadata">

**Author:** [@maximelb](https://community.limacharlie.com/u/maximelb)\
**Replies:** 0\
**Last updated:** [September 17, 2026, 12:07am UTC](https://community.limacharlie.com/t/per-sensor-telemetry-freshness/785 "2026-09-17T00:07:29Z")

</div>

LimaCharlie Sensors (EDRs and other data sources) is processed in real-time in LimaCharlie, but the Timeline view and Detections view (and associated APIs) used to be guaranteed up to date within approximately 3 minutes. …

---

## [Physical AI and self-learning machines with Dr. Amarjot Singh \[348\]](https://community.limacharlie.com/t/physical-ai-and-self-learning-machines-with-dr-amarjot-singh-348/784)

<div class="topic-metadata">

**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\
**Replies:** 0\
**Last updated:** [September 17, 2026, 12:00am UTC](https://community.limacharlie.com/t/physical-ai-and-self-learning-machines-with-dr-amarjot-singh-348/784 "2026-09-17T00:00:04Z")

</div>

---

## [AI in the MSSP SOC: From Pilots to Production](https://community.limacharlie.com/t/ai-in-the-mssp-soc-from-pilots-to-production/783)

<div class="topic-metadata">

**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\
**Replies:** 0\
**Last updated:** [September 16, 2026, 7:00pm UTC](https://community.limacharlie.com/t/ai-in-the-mssp-soc-from-pilots-to-production/783 "2026-09-16T19:00:04Z")

</div>

---

## [How Soteria scaled its MDR practice on LimaCharlie — with Paul Ihme](https://community.limacharlie.com/t/how-soteria-scaled-its-mdr-practice-on-limacharlie-with-paul-ihme/777)

<div class="topic-metadata">

**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\
**Replies:** 0\
**Last updated:** [September 14, 2026, 4:00pm UTC](https://community.limacharlie.com/t/how-soteria-scaled-its-mdr-practice-on-limacharlie-with-paul-ihme/777 "2026-09-14T16:00:05Z")

</div>

---

## [Intel Chat: Claude models reached real systems, an AI safety resignation & ShieldCrash \[347\]](https://community.limacharlie.com/t/intel-chat-claude-models-reached-real-systems-an-ai-safety-resignation-shieldcrash-347/774)

<div class="topic-metadata">

**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\
**Replies:** 0\
**Last updated:** [September 11, 2026, 4:00pm UTC](https://community.limacharlie.com/t/intel-chat-claude-models-reached-real-systems-an-ai-safety-resignation-shieldcrash-347/774 "2026-09-11T16:00:04Z")

</div>

---

## [Six new endpoint commands: container inventory, file search, content grep, bulk collection, git repo discovery, full USB enumeration](https://community.limacharlie.com/t/six-new-endpoint-commands-container-inventory-file-search-content-grep-bulk-collection-git-repo-discovery-full-usb-enumeration/772)

<div class="topic-metadata">

**Author:** [@maximelb](https://community.limacharlie.com/u/maximelb)\
**Replies:** 0\
**Last updated:** [September 9, 2026, 3:59pm UTC](https://community.limacharlie.com/t/six-new-endpoint-commands-container-inventory-file-search-content-grep-bulk-collection-git-repo-discovery-full-usb-enumeration/772 "2026-09-09T15:59:39Z")

</div>

Sensor 5.3.9 adds six commands to the tasking interface. Four of them come out of work on cloud workload and appsec visibility, and two are the general form of commands that were previously narrower than people wanted. A…

---

## [Intel Chat: OpenAI's Astra hits Critical, DEF CON phishing, Philippine nuclear breach \[346\]](https://community.limacharlie.com/t/intel-chat-openais-astra-hits-critical-def-con-phishing-philippine-nuclear-breach-346/771)

<div class="topic-metadata">

**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\
**Replies:** 0\
**Last updated:** [September 3, 2026, 6:00pm UTC](https://community.limacharlie.com/t/intel-chat-openais-astra-hits-critical-def-con-phishing-philippine-nuclear-breach-346/771 "2026-09-03T18:00:04Z")

</div>

---

## [Availability](https://community.limacharlie.com/t/availability/770)

<div class="topic-metadata">

**Author:** [@cmd1775](https://community.limacharlie.com/u/cmd1775)\
**Replies:** 3\
**Last updated:** [September 1, 2026, 6:58pm UTC](https://community.limacharlie.com/t/availability/770 "2026-09-01T18:58:35Z")

</div>

Are there some availability issues currently for US tenants? Seeing LCQL issues and AI Terminal retuning Status: Blocked - LimaCharlie search API is returning 500 errors for this region. The CLI itself points to status.…

---

## [Apps (Labs)](https://community.limacharlie.com/t/apps-labs/739)

<div class="topic-metadata">

**Author:** [@cmd1775](https://community.limacharlie.com/u/cmd1775)\
**Replies:** 3\
**Last updated:** [August 30, 2026, 12:24am UTC](https://community.limacharlie.com/t/apps-labs/739 "2026-08-30T00:24:42Z")

</div>

The CREATE NEW APP button in Apps doesn’t do anything when clicked. Not a big deal since you can access AI other ways to create an app, but wanted to let you know.

---

## [Vulnerability Reporting - Mozilla Maintenance Service](https://community.limacharlie.com/t/vulnerability-reporting-mozilla-maintenance-service/769)

<div class="topic-metadata">

**Author:** [@cmd1775](https://community.limacharlie.com/u/cmd1775)\
**Replies:** 3\
**Last updated:** [August 29, 2026, 2:35am UTC](https://community.limacharlie.com/t/vulnerability-reporting-mozilla-maintenance-service/769 "2026-08-29T02:35:28Z")

</div>

Seeing an issue where the Mozilla Maintenance Service is showing up for many Windows endpoints with the wrong version. Because of this, many vulnerabilities are being reported that don’t seem to exist. Vulnerability bei…

---

## [Inside SECNAP: An Agentic MDR Platform Built on LimaCharlie](https://community.limacharlie.com/t/inside-secnap-an-agentic-mdr-platform-built-on-limacharlie/768)

<div class="topic-metadata">

**Author:** [@charlton](https://community.limacharlie.com/u/charlton)\
**Replies:** 0\
**Last updated:** [August 26, 2026, 6:00pm UTC](https://community.limacharlie.com/t/inside-secnap-an-agentic-mdr-platform-built-on-limacharlie/768 "2026-08-26T18:00:04Z")

</div>

https://www.youtube.com/watch?v=CzszQiuD4xk

---

## [AI Sessions now run on OpenAI, Google Gemini, and OpenRouter](https://community.limacharlie.com/t/ai-sessions-now-run-on-openai-google-gemini-and-openrouter/767)

<div class="topic-metadata">

**Author:** [@maximelb](https://community.limacharlie.com/u/maximelb)\
**Replies:** 0\
**Last updated:** [August 20, 2026, 9:04pm UTC](https://community.limacharlie.com/t/ai-sessions-now-run-on-openai-google-gemini-and-openrouter/767 "2026-08-20T21:04:58Z")

</div>

AI Sessions are no longer Claude-only. You can now connect your own keys for: OpenAI: plain API key or Azure OpenAI (endpoint + deployment) Google Gemini: AI Studio API key or Vertex OpenRouter: one key gives you their…

---

## [Ship a Working Detection Pipeline in One Workshop: Headless SOC with Grid by LimaCharlie](https://community.limacharlie.com/t/ship-a-working-detection-pipeline-in-one-workshop-headless-soc-with-grid-by-limacharlie/766)

<div class="topic-metadata">

**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\
**Replies:** 0\
**Last updated:** [August 20, 2026, 3:00pm UTC](https://community.limacharlie.com/t/ship-a-working-detection-pipeline-in-one-workshop-headless-soc-with-grid-by-limacharlie/766 "2026-08-20T15:00:04Z")

</div>

---

## [LimaCharlie Release Notes - RSS or Notifications Feed](https://community.limacharlie.com/t/limacharlie-release-notes-rss-or-notifications-feed/765)

<div class="topic-metadata">

**Author:** [@Timothy\_christ](https://community.limacharlie.com/u/Timothy_christ)\
**Replies:** 2\
**Last updated:** [August 18, 2026, 11:09am UTC](https://community.limacharlie.com/t/limacharlie-release-notes-rss-or-notifications-feed/765 "2026-08-18T11:09:59Z")

</div>

Hi, Just a feature request to have a “Get Updates” feature in the (Overview - LimaCharlie Documentation) Just like in (https://status.limacharlie.io/) So that if there are EDR updates or specific Sensor/Adapter update…

---

## [Proving the value of security operations with Christopher Crowley \[344\]](https://community.limacharlie.com/t/proving-the-value-of-security-operations-with-christopher-crowley-344/764)

<div class="topic-metadata">

**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\
**Replies:** 0\
**Last updated:** [August 13, 2026, 5:00pm UTC](https://community.limacharlie.com/t/proving-the-value-of-security-operations-with-christopher-crowley-344/764 "2026-08-13T17:00:04Z")

</div>

---

## [Ingesting & Detection for Flat File](https://community.limacharlie.com/t/ingesting-detection-for-flat-file/763)

<div class="topic-metadata">

**Author:** [@Brandon\_Poole](https://community.limacharlie.com/u/Brandon_Poole)\
**Replies:** 1\
**Last updated:** [August 11, 2026, 8:28pm UTC](https://community.limacharlie.com/t/ingesting-detection-for-flat-file/763 "2026-08-11T20:28:30Z")

</div>

I have 3 Window servers that has an application that writes logs to a local flat file. The application also supports send the data via syslog. My question is, what is the best way to ingest the telemetry and write a few …

---

## [Feature request — server-side timezone formatting for ts in query results](https://community.limacharlie.com/t/feature-request-server-side-timezone-formatting-for-ts-in-query-results/762)

<div class="topic-metadata">

**Author:** [@senior](https://community.limacharlie.com/u/senior)\
**Replies:** 0\
**Last updated:** [August 3, 2026, 8:50am UTC](https://community.limacharlie.com/t/feature-request-server-side-timezone-formatting-for-ts-in-query-results/762 "2026-08-03T08:50:09Z")

</div>

Greetings LC team, Running LimaCharlie as an MSSP with all customers in Africa/Nairobi (EAT, UTC+3). API and CLI query results return the ts field as a UTC-formatted string (e.g. ts: '2026-08-03 06:08:14'), which is cor…

---

## [Cloud Security](https://community.limacharlie.com/t/cloud-security/751)

<div class="topic-metadata">

**Author:** [@cmd1775](https://community.limacharlie.com/u/cmd1775)\
**Replies:** 9\
**Last updated:** [August 1, 2026, 12:14am UTC](https://community.limacharlie.com/t/cloud-security/751 "2026-08-01T00:14:03Z")

</div>

Cloud Security is now appearing in the GUI. I don’t see anything here or in the docs around this extension. Since this extension isn’t available under Add-Ons, I am assuming this feature is in beta? Any idea when this w…

---

## [GUI - Overview](https://community.limacharlie.com/t/gui-overview/761)

<div class="topic-metadata">

**Author:** [@cmd1775](https://community.limacharlie.com/u/cmd1775)\
**Replies:** 0\
**Last updated:** [July 31, 2026, 4:47pm UTC](https://community.limacharlie.com/t/gui-overview/761 "2026-07-31T16:47:40Z")

</div>

Can CEF sensors be added to the Overview part of the GUI? Thank you

---

## [Intel Chat: Hugging Face AI-agent breach, WP2Shell, Suno & Paidwork leaks, AWS Bahrain strike \[342\]](https://community.limacharlie.com/t/intel-chat-hugging-face-ai-agent-breach-wp2shell-suno-paidwork-leaks-aws-bahrain-strike-342/760)

<div class="topic-metadata">

**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\
**Replies:** 0\
**Last updated:** [July 30, 2026, 9:00pm UTC](https://community.limacharlie.com/t/intel-chat-hugging-face-ai-agent-breach-wp2shell-suno-paidwork-leaks-aws-bahrain-strike-342/760 "2026-07-30T21:00:04Z")

</div>

---

## [Container ID / is\_container on Linux sensor events?](https://community.limacharlie.com/t/container-id-is-container-on-linux-sensor-events/758)

<div class="topic-metadata">

**Author:** [@zanegm](https://community.limacharlie.com/u/zanegm)\
**Replies:** 1\
**Last updated:** [July 30, 2026, 5:41pm UTC](https://community.limacharlie.com/t/container-id-is-container-on-linux-sensor-events/758 "2026-07-30T17:41:46Z")

</div>

I’m running the Linux sensor on a VM with Docker containers, and processes inside the containers come through fine as NEW\_PROCESS with the in-container FILE\_PATH. Is there a supported way to get container attribution on …

---

## [Building trustworthy AI with Rob van der Veer \[341\]](https://community.limacharlie.com/t/building-trustworthy-ai-with-rob-van-der-veer-341/756)

<div class="topic-metadata">

**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\
**Replies:** 0\
**Last updated:** [July 29, 2026, 4:00pm UTC](https://community.limacharlie.com/t/building-trustworthy-ai-with-rob-van-der-veer-341/756 "2026-07-29T16:00:04Z")

</div>

---

## [Restrict who can create Groups and Organizations](https://community.limacharlie.com/t/restrict-who-can-create-groups-and-organizations/755)

<div class="topic-metadata">

**Author:** [@senior](https://community.limacharlie.com/u/senior)\
**Replies:** 1\
**Last updated:** [July 29, 2026, 3:36am UTC](https://community.limacharlie.com/t/restrict-who-can-create-groups-and-organizations/755 "2026-07-29T03:36:33Z")

</div>

It is very important to ensure we willingly grant access to users’ permission to create groups and organizations especially for MSSPs. At the moment a low-level user is able to create multiple groups, multiple organizati…

---

## [LimaCharlie Cloud Security: CNAPP Walkthrough](https://community.limacharlie.com/t/limacharlie-cloud-security-cnapp-walkthrough/754)

<div class="topic-metadata">

**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\
**Replies:** 0\
**Last updated:** [July 28, 2026, 6:00pm UTC](https://community.limacharlie.com/t/limacharlie-cloud-security-cnapp-walkthrough/754 "2026-07-28T18:00:04Z")

</div>

---

## [New Product: Cloud Security](https://community.limacharlie.com/t/new-product-cloud-security/753)

<div class="topic-metadata">

**Author:** [@maximelb](https://community.limacharlie.com/u/maximelb)\
**Replies:** 0\
**Last updated:** [July 28, 2026, 5:24pm UTC](https://community.limacharlie.com/t/new-product-cloud-security/753 "2026-07-28T17:24:09Z")

</div>

Hot on the tail of Vulnerability Reporting, today we’re releasing Cloud Security (CNAPP). The best part is that like everything else in LimaCharlie, this isn’t your grandpa’s CNAPP. It’s not only a normal CNAPP but it’s …

---

## [LimaCharlie 101: EDR deployment, detection rules, and threat intelligence](https://community.limacharlie.com/t/limacharlie-101-edr-deployment-detection-rules-and-threat-intelligence/749)

<div class="topic-metadata">

**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\
**Replies:** 0\
**Last updated:** [July 24, 2026, 5:00pm UTC](https://community.limacharlie.com/t/limacharlie-101-edr-deployment-detection-rules-and-threat-intelligence/749 "2026-07-24T17:00:04Z")

</div>

---

## [AI Chat: The Hugging Face / OpenAI breach — the attacker was the model \[340\]](https://community.limacharlie.com/t/ai-chat-the-hugging-face-openai-breach-the-attacker-was-the-model-340/748)

<div class="topic-metadata">

**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\
**Replies:** 0\
**Last updated:** [July 23, 2026, 5:00pm UTC](https://community.limacharlie.com/t/ai-chat-the-hugging-face-openai-breach-the-attacker-was-the-model-340/748 "2026-07-23T17:00:05Z")

</div>

[Next page](https://community.limacharlie.com/latest.md?page=1)
