LimaCharlie Responder is an incident response tool designed to automate the initial assessment phase following a security incident. The tool utilizes a feature called "Sweep" to conduct host examinations across multiple system components. The Sweep functionality examines various aspects of host activity including running processes, loaded modules, active network connections, and modified files. This examination aims to identify suspicious behavior patterns and indicators of compromise during incident investigations. Responder generates evolving reports that highlight critical information discovered during the sweep process. These reports provide a starting point for security teams to conduct further investigation and analysis. The tool focuses on forensics gathering automation, enabling security operations teams to quickly collect relevant data from affected hosts during incident response activities. The automated nature of the tool reduces the manual effort required during the initial triage phase of incident response workflows.