Morning, Here are my slides from #C94LHP0CC yesterday on building atop Osquery for those who asked. The queries are in the speaker notes. Just click View->Speaker notes. Grab me today if you've got any questions. https://docs.google.com/presentation/d/1lEAIa5CwUHh7CvKl7Q8plmFwNKPBQDfFfMWtZNlGBuo/edit?usp=sharing