When the sensor is installed, LimaCharlie will start recording the telemetry. It will not, however, generate detections or take actions to protect the endpoints automatically. As an infrastructure company, we recognize that each environment is different, and one size fits all approach rarely works well. By default, any new organization starts empty, without any pre-configured settings, add-ons, or D&R rules.
LimaCharlie makes it easy to add a detection & response rule as soon as WannaCry, Snugy, ZeuS, Dridex, CoinMiner, Nanocore or any other malware is discovered. This way, you are in a full control of your coverage and there is no need to wait for a vendor to come up with a new detection rule.