Skip to content

Third-Party Extensions

Extensions built by third-party developers that integrate external tools and services with LimaCharlie.

Available Extensions

  • Atomic Red Team - Adversary simulation testing
  • Cloudflare - WAF, Zero Trust, DNS, and cache incident-response and investigation actions
  • Govee - Govee device integration
  • HaloPSA - PSA ticketing and asset management
  • Hayabusa - Windows event log analysis
  • Microsoft Response - Entra ID, Intune, Defender XDR, and Defender for Endpoint investigation and response actions
  • NIMS - NIMS integration
  • Okta - Okta identity investigation and response (suspend, MFA/password reset, session & token revocation)
  • OTX - AlienVault OTX threat intelligence
  • PagerDuty - Incident management notifications
  • Plaso - Timeline analysis with Plaso
  • Renigma - Renigma integration
  • SecureAnnex - SecureAnnex integration
  • SentinelOne - SentinelOne EDR response and triage actions
  • ServiceNow - ITSM ticketing, CMDB and bidirectional Case mirroring
  • Strelka - File analysis with Strelka
  • ThreatLocker - ThreatLocker Application Control approval workflow
  • Twilio - SMS and voice notifications
  • Velociraptor - DFIR artifact collection
  • YARA - YARA rule scanning
  • Zeek - Network traffic analysis

See Also