Hello Guys, I have created a very simple extension (weekend project) to block IP port, kill process on Linux machine, a step towards active response functionality. Have a look https://github.com/sttor/easysiem-osquery-response-plugin-python