@chrishumphries in general i would say that osquery is not a great replacement for endpoint security tooling. The osx-attacks pack has detections for lots of well known adware/malware, but it’s a drop in the bucket compared to what’s out there. With that being said, im not sure there’s a mac endpoint security vendor that i would recommend above others, and most of them are $$$