Hey @clong! yeah, atc and carves both fit into that category. I am looking for table examples that don't require a user config and work in vanilla osqueryi