LimaCharlie’s brings together cybersecurity capabilities and eliminates security gaps for more effective protection against today’s threats. For detailed information, please refer to the LimaCharlie’s official documentation.

Integration Method: API

Tables: Detection Finding (2004)

This integration supports the following type of events.

This integration supports the following versions.

Note:

This integration was tested with the LimaCharlie release as of November 2024.

Prerequisites

• The user should have access to the LimaCharlie portal.

• The user should have access to the DataBee console.

Configuration Overview

1. Create an User API Key to fetch the data.

2. Create Lima Charlie Data Feed in the DataBee console with the required Client credentials.

   DataBee Parameter	LimaCharlie Parameter
   API Key	User ID
   Secret Key	User API Key
   Organization ID	OID

LimaCharlie Configuration

1. Log in to LimaCharlie Portal.

2. Under the All Organizations list, select the Organization for which you want to collect the File Integrity monitoring data.
    

3. Navigate to Access Management -> REST API in the navigation panel on the left side.
    

4. Copy the OID for future use.
    

5. From the top right corner select the settings icon and navigate to “Manage User Settings”.
    

6. Navigate to “User API Keys” section.
    

7. Copy the User ID for future use. Enter a new API key name under “Create User API Key” and select Create.
    

8. Copy the New User API Key generated.
    
   

   Note:

   Ensure that the New User API Key is stored securely in a safe location for future reference.

DataBee Configuration

1. Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button.
    

2. Search for the LimaCharlie and click it as shown below.
    

3. Click on the API Ingest option for collection method.
    

4. Enter feed contact information and click Next.
    

5. In the configuration page, confirm the following:

   • API Base URL: this is the base URL that DataBee will interact with.

   • Authorization Method: TokenURLAuth

   • API Key: paste the User ID saved earlier.

   • Secret Key: paste the User API Key generated earlier.

   • Organization ID: paste the OID saved earlier.

   • Event Types: preselected for all the event types that integration pulls.
      

6. Click Submit.

Troubleshooting Tips

• If you are facing unauthorized error, it might be due to incorrect credentials. Please ensure that the User ID, OID and User API Key are pasted correctly.