Ship a Working Detection Pipeline in One Workshop: Headless SOC with Grid by LimaCharlie

Training: https://training.limacharlie.io/courses/f0444db1-1ffb-4c93-bb24-cd64b279c2b4

By the end of this hands-on workshop, you will have deployed a working detection pipeline, ingested a cloud log source, and shipped a bespoke dashboard app, all using Claude Code integrated with Grid by LimaCharlie.

Along the way, you will see how Grid compresses the traditional SIEM/EDR/SOAR stack into a single automated workspace. We go well beyond standard EDR and SIEM use cases.

What to expect:

Detection engineering: Author, replay, and tune Detection & Response rules with AI-assisted generation, suppress false positives, and validate rules against historical telemetry with replay.

Cloud operations: Automate deployment of EDR agents and configure cloud telemetry ingestion into the LimaCharlie platform.

Analyst-facing tooling: Build and ship a custom dashboard app on top of your new pipeline.

No prior LimaCharlie experience is required. A Claude Code license is required to follow along (not included).