Nice work from @teoseller - Mapping the MITRE ATT&CK Matrix with Osquery https://github.com/teoseller/osquery-attck . I'll try to help very soon 😃