# Latest **URL:** https://community.limacharlie.com/latest.md?page=1 [Latest](https://community.limacharlie.com/latest.md) · [Categories](https://community.limacharlie.com/categories.md) · [Tags](https://community.limacharlie.com/tags.md) **Page:** 2 --- ## [How Soteria scaled its MDR practice on LimaCharlie — with Paul Ihme](https://community.limacharlie.com/t/how-soteria-scaled-its-mdr-practice-on-limacharlie-with-paul-ihme/777)
**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\ **Replies:** 0\ **Last updated:** [September 14, 2026, 4:00pm UTC](https://community.limacharlie.com/t/how-soteria-scaled-its-mdr-practice-on-limacharlie-with-paul-ihme/777 "2026-09-14T16:00:05Z")
--- ## [Intel Chat: Claude models reached real systems, an AI safety resignation & ShieldCrash \[347\]](https://community.limacharlie.com/t/intel-chat-claude-models-reached-real-systems-an-ai-safety-resignation-shieldcrash-347/774)
**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\ **Replies:** 0\ **Last updated:** [September 11, 2026, 4:00pm UTC](https://community.limacharlie.com/t/intel-chat-claude-models-reached-real-systems-an-ai-safety-resignation-shieldcrash-347/774 "2026-09-11T16:00:04Z")
--- ## [Six new endpoint commands: container inventory, file search, content grep, bulk collection, git repo discovery, full USB enumeration](https://community.limacharlie.com/t/six-new-endpoint-commands-container-inventory-file-search-content-grep-bulk-collection-git-repo-discovery-full-usb-enumeration/772)
**Author:** [@maximelb](https://community.limacharlie.com/u/maximelb)\ **Replies:** 0\ **Last updated:** [September 9, 2026, 3:59pm UTC](https://community.limacharlie.com/t/six-new-endpoint-commands-container-inventory-file-search-content-grep-bulk-collection-git-repo-discovery-full-usb-enumeration/772 "2026-09-09T15:59:39Z")
Sensor 5.3.9 adds six commands to the tasking interface. Four of them come out of work on cloud workload and appsec visibility, and two are the general form of commands that were previously narrower than people wanted. A… --- ## [Intel Chat: OpenAI's Astra hits Critical, DEF CON phishing, Philippine nuclear breach \[346\]](https://community.limacharlie.com/t/intel-chat-openais-astra-hits-critical-def-con-phishing-philippine-nuclear-breach-346/771)
**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\ **Replies:** 0\ **Last updated:** [September 3, 2026, 6:00pm UTC](https://community.limacharlie.com/t/intel-chat-openais-astra-hits-critical-def-con-phishing-philippine-nuclear-breach-346/771 "2026-09-03T18:00:04Z")
--- ## [Availability](https://community.limacharlie.com/t/availability/770)
**Author:** [@cmd1775](https://community.limacharlie.com/u/cmd1775)\ **Replies:** 3\ **Last updated:** [September 1, 2026, 6:58pm UTC](https://community.limacharlie.com/t/availability/770 "2026-09-01T18:58:35Z")
Are there some availability issues currently for US tenants? Seeing LCQL issues and AI Terminal retuning Status: Blocked - LimaCharlie search API is returning 500 errors for this region. The CLI itself points to status.… --- ## [Apps (Labs)](https://community.limacharlie.com/t/apps-labs/739)
**Author:** [@cmd1775](https://community.limacharlie.com/u/cmd1775)\ **Replies:** 3\ **Last updated:** [August 30, 2026, 12:24am UTC](https://community.limacharlie.com/t/apps-labs/739 "2026-08-30T00:24:42Z")
The CREATE NEW APP button in Apps doesn’t do anything when clicked. Not a big deal since you can access AI other ways to create an app, but wanted to let you know. --- ## [Vulnerability Reporting - Mozilla Maintenance Service](https://community.limacharlie.com/t/vulnerability-reporting-mozilla-maintenance-service/769)
**Author:** [@cmd1775](https://community.limacharlie.com/u/cmd1775)\ **Replies:** 3\ **Last updated:** [August 29, 2026, 2:35am UTC](https://community.limacharlie.com/t/vulnerability-reporting-mozilla-maintenance-service/769 "2026-08-29T02:35:28Z")
Seeing an issue where the Mozilla Maintenance Service is showing up for many Windows endpoints with the wrong version. Because of this, many vulnerabilities are being reported that don’t seem to exist. Vulnerability bei… --- ## [Inside SECNAP: An Agentic MDR Platform Built on LimaCharlie](https://community.limacharlie.com/t/inside-secnap-an-agentic-mdr-platform-built-on-limacharlie/768)
**Author:** [@charlton](https://community.limacharlie.com/u/charlton)\ **Replies:** 0\ **Last updated:** [August 26, 2026, 6:00pm UTC](https://community.limacharlie.com/t/inside-secnap-an-agentic-mdr-platform-built-on-limacharlie/768 "2026-08-26T18:00:04Z")
https://www.youtube.com/watch?v=CzszQiuD4xk --- ## [AI Sessions now run on OpenAI, Google Gemini, and OpenRouter](https://community.limacharlie.com/t/ai-sessions-now-run-on-openai-google-gemini-and-openrouter/767)
**Author:** [@maximelb](https://community.limacharlie.com/u/maximelb)\ **Replies:** 0\ **Last updated:** [August 20, 2026, 9:04pm UTC](https://community.limacharlie.com/t/ai-sessions-now-run-on-openai-google-gemini-and-openrouter/767 "2026-08-20T21:04:58Z")
AI Sessions are no longer Claude-only. You can now connect your own keys for: OpenAI: plain API key or Azure OpenAI (endpoint + deployment) Google Gemini: AI Studio API key or Vertex OpenRouter: one key gives you their… --- ## [Ship a Working Detection Pipeline in One Workshop: Headless SOC with Grid by LimaCharlie](https://community.limacharlie.com/t/ship-a-working-detection-pipeline-in-one-workshop-headless-soc-with-grid-by-limacharlie/766)
**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\ **Replies:** 0\ **Last updated:** [August 20, 2026, 3:00pm UTC](https://community.limacharlie.com/t/ship-a-working-detection-pipeline-in-one-workshop-headless-soc-with-grid-by-limacharlie/766 "2026-08-20T15:00:04Z")
--- ## [LimaCharlie Release Notes - RSS or Notifications Feed](https://community.limacharlie.com/t/limacharlie-release-notes-rss-or-notifications-feed/765)
**Author:** [@Timothy\_christ](https://community.limacharlie.com/u/Timothy_christ)\ **Replies:** 2\ **Last updated:** [August 18, 2026, 11:09am UTC](https://community.limacharlie.com/t/limacharlie-release-notes-rss-or-notifications-feed/765 "2026-08-18T11:09:59Z")
Hi, Just a feature request to have a “Get Updates” feature in the (Overview - LimaCharlie Documentation) Just like in (https://status.limacharlie.io/) So that if there are EDR updates or specific Sensor/Adapter update… --- ## [Proving the value of security operations with Christopher Crowley \[344\]](https://community.limacharlie.com/t/proving-the-value-of-security-operations-with-christopher-crowley-344/764)
**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 5:00pm UTC](https://community.limacharlie.com/t/proving-the-value-of-security-operations-with-christopher-crowley-344/764 "2026-08-13T17:00:04Z")
--- ## [Ingesting & Detection for Flat File](https://community.limacharlie.com/t/ingesting-detection-for-flat-file/763)
**Author:** [@Brandon\_Poole](https://community.limacharlie.com/u/Brandon_Poole)\ **Replies:** 1\ **Last updated:** [August 11, 2026, 8:28pm UTC](https://community.limacharlie.com/t/ingesting-detection-for-flat-file/763 "2026-08-11T20:28:30Z")
I have 3 Window servers that has an application that writes logs to a local flat file. The application also supports send the data via syslog. My question is, what is the best way to ingest the telemetry and write a few … --- ## [Feature request — server-side timezone formatting for ts in query results](https://community.limacharlie.com/t/feature-request-server-side-timezone-formatting-for-ts-in-query-results/762)
**Author:** [@senior](https://community.limacharlie.com/u/senior)\ **Replies:** 0\ **Last updated:** [August 3, 2026, 8:50am UTC](https://community.limacharlie.com/t/feature-request-server-side-timezone-formatting-for-ts-in-query-results/762 "2026-08-03T08:50:09Z")
Greetings LC team, Running LimaCharlie as an MSSP with all customers in Africa/Nairobi (EAT, UTC+3). API and CLI query results return the ts field as a UTC-formatted string (e.g. ts: '2026-08-03 06:08:14'), which is cor… --- ## [Cloud Security](https://community.limacharlie.com/t/cloud-security/751)
**Author:** [@cmd1775](https://community.limacharlie.com/u/cmd1775)\ **Replies:** 9\ **Last updated:** [August 1, 2026, 12:14am UTC](https://community.limacharlie.com/t/cloud-security/751 "2026-08-01T00:14:03Z")
Cloud Security is now appearing in the GUI. I don’t see anything here or in the docs around this extension. Since this extension isn’t available under Add-Ons, I am assuming this feature is in beta? Any idea when this w… --- ## [GUI - Overview](https://community.limacharlie.com/t/gui-overview/761)
**Author:** [@cmd1775](https://community.limacharlie.com/u/cmd1775)\ **Replies:** 0\ **Last updated:** [July 31, 2026, 4:47pm UTC](https://community.limacharlie.com/t/gui-overview/761 "2026-07-31T16:47:40Z")
Can CEF sensors be added to the Overview part of the GUI? Thank you --- ## [Intel Chat: Hugging Face AI-agent breach, WP2Shell, Suno & Paidwork leaks, AWS Bahrain strike \[342\]](https://community.limacharlie.com/t/intel-chat-hugging-face-ai-agent-breach-wp2shell-suno-paidwork-leaks-aws-bahrain-strike-342/760)
**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\ **Replies:** 0\ **Last updated:** [July 30, 2026, 9:00pm UTC](https://community.limacharlie.com/t/intel-chat-hugging-face-ai-agent-breach-wp2shell-suno-paidwork-leaks-aws-bahrain-strike-342/760 "2026-07-30T21:00:04Z")
--- ## [Container ID / is\_container on Linux sensor events?](https://community.limacharlie.com/t/container-id-is-container-on-linux-sensor-events/758)
**Author:** [@zanegm](https://community.limacharlie.com/u/zanegm)\ **Replies:** 1\ **Last updated:** [July 30, 2026, 5:41pm UTC](https://community.limacharlie.com/t/container-id-is-container-on-linux-sensor-events/758 "2026-07-30T17:41:46Z")
I’m running the Linux sensor on a VM with Docker containers, and processes inside the containers come through fine as NEW\_PROCESS with the in-container FILE\_PATH. Is there a supported way to get container attribution on … --- ## [Building trustworthy AI with Rob van der Veer \[341\]](https://community.limacharlie.com/t/building-trustworthy-ai-with-rob-van-der-veer-341/756)
**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\ **Replies:** 0\ **Last updated:** [July 29, 2026, 4:00pm UTC](https://community.limacharlie.com/t/building-trustworthy-ai-with-rob-van-der-veer-341/756 "2026-07-29T16:00:04Z")
--- ## [Restrict who can create Groups and Organizations](https://community.limacharlie.com/t/restrict-who-can-create-groups-and-organizations/755)
**Author:** [@senior](https://community.limacharlie.com/u/senior)\ **Replies:** 1\ **Last updated:** [July 29, 2026, 3:36am UTC](https://community.limacharlie.com/t/restrict-who-can-create-groups-and-organizations/755 "2026-07-29T03:36:33Z")
It is very important to ensure we willingly grant access to users’ permission to create groups and organizations especially for MSSPs. At the moment a low-level user is able to create multiple groups, multiple organizati… --- ## [LimaCharlie Cloud Security: CNAPP Walkthrough](https://community.limacharlie.com/t/limacharlie-cloud-security-cnapp-walkthrough/754)
**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\ **Replies:** 0\ **Last updated:** [July 28, 2026, 6:00pm UTC](https://community.limacharlie.com/t/limacharlie-cloud-security-cnapp-walkthrough/754 "2026-07-28T18:00:04Z")
--- ## [New Product: Cloud Security](https://community.limacharlie.com/t/new-product-cloud-security/753)
**Author:** [@maximelb](https://community.limacharlie.com/u/maximelb)\ **Replies:** 0\ **Last updated:** [July 28, 2026, 5:24pm UTC](https://community.limacharlie.com/t/new-product-cloud-security/753 "2026-07-28T17:24:09Z")
Hot on the tail of Vulnerability Reporting, today we’re releasing Cloud Security (CNAPP). The best part is that like everything else in LimaCharlie, this isn’t your grandpa’s CNAPP. It’s not only a normal CNAPP but it’s … --- ## [LimaCharlie 101: EDR deployment, detection rules, and threat intelligence](https://community.limacharlie.com/t/limacharlie-101-edr-deployment-detection-rules-and-threat-intelligence/749)
**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\ **Replies:** 0\ **Last updated:** [July 24, 2026, 5:00pm UTC](https://community.limacharlie.com/t/limacharlie-101-edr-deployment-detection-rules-and-threat-intelligence/749 "2026-07-24T17:00:04Z")
--- ## [AI Chat: The Hugging Face / OpenAI breach — the attacker was the model \[340\]](https://community.limacharlie.com/t/ai-chat-the-hugging-face-openai-breach-the-attacker-was-the-model-340/748)
**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\ **Replies:** 0\ **Last updated:** [July 23, 2026, 5:00pm UTC](https://community.limacharlie.com/t/ai-chat-the-hugging-face-openai-breach-the-attacker-was-the-model-340/748 "2026-07-23T17:00:05Z")
--- ## [Packages - Mozilla Maintenance Service](https://community.limacharlie.com/t/packages-mozilla-maintenance-service/747)
**Author:** [@cmd1775](https://community.limacharlie.com/u/cmd1775)\ **Replies:** 1\ **Last updated:** [July 22, 2026, 3:15am UTC](https://community.limacharlie.com/t/packages-mozilla-maintenance-service/747 "2026-07-22T03:15:37Z")
There seems to be an issue with the reported version of the Mozilla Maintenance Service under Packages, which impacts Vulnerability Reporting. This component updates when the browser updates, but is showing a version tha… --- ## [AI Chat: Grok CLI data exfiltration, AI vs. patching, distillation wars & shadow AI \[339\]](https://community.limacharlie.com/t/ai-chat-grok-cli-data-exfiltration-ai-vs-patching-distillation-wars-shadow-ai-339/746)
**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\ **Replies:** 0\ **Last updated:** [July 14, 2026, 10:00pm UTC](https://community.limacharlie.com/t/ai-chat-grok-cli-data-exfiltration-ai-vs-patching-distillation-wars-shadow-ai-339/746 "2026-07-14T22:00:04Z")
--- ## [Intel Chat: Dialogflow Rogue Agent, ghost phishing, CISA KEV deadline & HalluSquatting \[338\]](https://community.limacharlie.com/t/intel-chat-dialogflow-rogue-agent-ghost-phishing-cisa-kev-deadline-hallusquatting-338/745)
**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\ **Replies:** 0\ **Last updated:** [July 10, 2026, 3:00am UTC](https://community.limacharlie.com/t/intel-chat-dialogflow-rogue-agent-ghost-phishing-cisa-kev-deadline-hallusquatting-338/745 "2026-07-10T03:00:04Z")
--- ## [New Extension: Okta Response 🔐](https://community.limacharlie.com/t/new-extension-okta-response/744)
**Author:** [@maximelb](https://community.limacharlie.com/u/maximelb)\ **Replies:** 0\ **Last updated:** [July 9, 2026, 9:40pm UTC](https://community.limacharlie.com/t/new-extension-okta-response/744 "2026-07-09T21:40:45Z")
Say hello to ext-okta — a new extension that connects LimaCharlie to your Okta org so your D&R rules and AI agents can contain an account compromise the moment it’s detected. What you can do with it: Contain a comprom… --- ## [New Extension: Cloudflare Response 🛡️](https://community.limacharlie.com/t/new-extension-cloudflare-response/743)
**Author:** [@maximelb](https://community.limacharlie.com/u/maximelb)\ **Replies:** 0\ **Last updated:** [July 9, 2026, 9:39pm UTC](https://community.limacharlie.com/t/new-extension-cloudflare-response/743 "2026-07-09T21:39:55Z")
We’ve just released ext-cloudflare, a new extension that connects LimaCharlie to your Cloudflare account so your D&R rules and AI agents can respond to threats at the edge — directly from a detection, no separate SOAR ne… --- ## [Ransomware in the age of agentic AI with Behnaz Karimi \[337\]](https://community.limacharlie.com/t/ransomware-in-the-age-of-agentic-ai-with-behnaz-karimi-337/742)
**Author:** [@Christopher\_Luft](https://community.limacharlie.com/u/Christopher_Luft)\ **Replies:** 0\ **Last updated:** [July 8, 2026, 9:00pm UTC](https://community.limacharlie.com/t/ransomware-in-the-age-of-agentic-ai-with-behnaz-karimi-337/742 "2026-07-08T21:00:04Z")
[Previous page](https://community.limacharlie.com/latest.md) [Next page](https://community.limacharlie.com/latest.md?page=2)