Thanks for some great answers @Anadi! I'll definitely check out the training. Just to clarify, I know that osquery is very flexible with logging and that it works with docker etc. But I'm interested in how people actually use it, and to hear different experiences people have etc (the things you can't read in docs), both good and bad!