👋 Hey folks, small bit of self-promotion, I wrote up a deep-dive on the usage of various date and time functions in osquery's SQLite. I tried to cover all of the bases in terms of the various things you can do as well as some of the common conversions for non-unix epoch timestamps (eg. converting WebKit timestamps). Dropping the link here for the inevitable next community question on something like: "How do I find the session length of logged in users?" https://blog.kolide.com/8-sql-snippets-to-make-you-an-osquery-datetime-expert-a7e418087915