Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Threat hunting to detection engineering: Analyzing real malware with Claude Code, LimaCharlie, and Linux

Claude Code, originally just auto-complete on steroids for IDEs, shows a lot of promise for becoming a major tool in the DFIR/detection engineering/security analyst’s toolbox. Whether it’s Claude Code’s support of MCP, agent skills, or general ability to quickly figure out how to accomplish a given task, it is rapidly becoming more than a code generation tool. This is the first of a three-part series.

Agentic SecOps Workspace (ASW) office hours with LimaCharlie

Join us for a special Defender Fridays Office Hours session where the LimaCharlie team demonstrates the new Agentic SecOps Workspace (ASW) and explores what's possible when AI agents operate security infrastructure directly. At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.

AI Action > AI Advice

Sr. Technical Content Strategist From Advisory AI to Operational AI in Security Operations The early wave of AI SOC platforms has delivered mixed results. While AI proved its usefulness as a triage assistant and next-step remediation advisor, these benefits came with significant drawbacks. Foremost, the cost of outsourcing an AI SOC is significant. Medium enterprises could expect to pay anywhere from $120,000 – $360,000 a year for the service.

Claude Code reads a threat report, hunts for IOCs, and deploys detection rules #cybersecurity #ai

From threat intelligence article to deployed coverage. The AI agent extracts indicators, searches for compromise across tenants, confirms clean status, then creates and tests detection rules for ongoing protection within your LimaCharlie environment.

The future of security operations with John Hubbard

Join us for this week's Defender Fridays as we explore the transformative impact of AI on Security Operations Centers with John Hubbard, SANS Senior Instructor and Cyber Defense Curriculum Lead. At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.

Intel Chat: Visual Studio Code, Sinkholes reversal, Chinese pen-testing & FortiSIEM zero-day [286]

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community. Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform. This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows.

Hiring fraud and deepfakes with Tom Cross

Join us for this week's Defender Fridays as we explore the evolving threat of deepfakes in hiring and remote work with Tom Cross, Head of Threat Research at GetReal Security. At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.