As part of it, I worked on an osquery reference handout that covers common tables & queries focused on process interrogation & persistence techniques. Any and all feedback is welcome. You can download that here: https://defensivedepth.files.wordpress.com/2018/10/osquery-handout.pdf