August 31st, 2022
Developer Roll Up: August 2022
Another month rolls off the calendar with lots of exciting things happening at LimaCharlie. The team was on the ground at Blue Team Con which was a great experience. The most exciting thing this month would have to be the addition of Matt Bromerly to the team. Matt is joining LimaCharlie as a Lead Solutions Engineer/Developer Relations. He has deep experience and a passion for working with organizations to solve their cybersecurity challenges.
Live Webinar: How MSSPs can overcome challenging and uncertain times
Join us on September 6th @ 10:00 AM PT / 1:00 PM ET, with Paul Caiazzo, Larry Letow, and Ariel Ropek for a roundtable discussion where we are going to be exploring how MSSPs can thrive in these uncertain economic times. Security will continue to grow despite the economic conditions but client companies are going to become more price sensitive and this is going to impact MSSPs that compete on margin.
New Slack Audit Logs Sensor
We have added a new Slack sensor that allows the ingestion of Slack audit logs directly into LimaCharlie.
The Audit Logs API enables monitoring the audit events happening in an Enterprise Grid organization to ensure compliance, to prevent any inappropriate system access, and to allow security teams to audit suspicious behavior within their enterprise.
After Slack Audit Logs are ingested into LimaCharlie, you can have detection & response rules run on them at wire speed.
Get started by configuring a new sensor in the LimaCharlie web application. Note: you need to be on the Slack Enterprise Grid plan to use this capability.
Billing for Payloads
Starting October 1, 2022, deploying Payloads via LimaCharlie will be priced at $0.19 per 1 GB of data sent. For example, a 1GB payload sent to 10 endpoints will cost $1.9 (10GBs x $0.19).
This change will only impact organizations that leverage Payloads functionality, as well as Atomic Red Team, LimaCharlie Net installers & Dumper services (they are running as Payloads in LC).
To understand the impact on your organization, check the Metered Usage section of the Billing page. You will notice the new “Payload Data Sent” metric along with the size of payloads deployed and price. Note this price is shown for your information only; you won’t be charged for Payloads before October 1, 2022.
The reasoning for this update is that starting October 1, 2022, Google Cloud will start billing on outbound bandwidth from load balancers. As LimaCharlie is on GCP, we’re adjusting our pricing accordingly.
Please do not hesitate to reach out with any questions.
New ingestion method for external logs and telemetry
LimaCharlie has added a new ingestion method for logs and telemetry coming from external sources - events in the AWS Simple Queue Service (SQS).
Also, you can now suggest new sensors directly from the web app.
See what else is new in our release notes: https://limacharlie.io/release-notes