Also, for the ones who have deployed osquery acros...
# general
a
Also, for the ones who have deployed osquery across their endpoints, you must be using platforms like splunk to aggregate all the data right? What next? i mean we have the data in splunk, but we have to manually go and check for anomalies/vulnerabilities. What can we do to make it more "intelligent" and give us automated alerts or violations like what nexpose does.... (sry if this question was previously answered or too basic, i just got into osquery)