I am quite new to osquery. I want to experiment it for forensics/incident response. Any tips/guides/blogs/tutorials ? Also, I would like to know about any features left out in the documentation ( it's a bit hard for a newbie like me, the documentation). Thanks in advance !