Skip to content

LimaCharlie

Chronicle supports ingesting LimaCharlie telemetry

Backstory Data Types

  • LIMACHARLIE_EDR

Configuration

  1. In the LimaCharlie management portal, select Outputs
  2. At the top right, select the + symbol to add a new output
  3. Name the output "Cyderes"
  4. Select the Syslog module

limacharlie1

  1. In the Destination Host field, enter in the syslog endpoint information provided by Cyderes
  2. Select the Use SSL slider option
  3. Select the No Headers slider option
  4. Select Create