New release: better process tree, AI powered D&R rule co-writer, and more

Platform Updates Release Notes
1

Web App 4.2.1

  • AI co-writer for D&R: use “ask AI” when creating the rule and it helps you write a detection and response based on your prompt.
    • We currently use Google’s gemini-2-flash model that we tuned to do a good job building Detections and Responses in LimaCharlie, while the standard AI disclaimer applies: “trust but verify”. Honest to our ethos, it is pluggable; we welcome partners to bring powerful proprietary models and build on LC platform.
  • Event Tree updated for usability and performance on giant trees: enjoy collapsing and expanding groups of events, and traverse the tree with no strain on your browser. Check it out you will love how it feels now - and please tell us more on how to make it better.
  • Other performance optimizations and bug fixes

Endpoint Agent 4.33.5

  • Performance improvements for macOS
  • Infrastructure work to support Endpoint Protection Platforms (EPP), and added support for Microsoft Windows Defender

Note of change: LC Detection Events are now immutable. One can no longer remove the past events, or modify them in any way, as the detection events are factual historic records and it’s prudent to keep them as such.

1 Like