epoch is an option you can set in the osquery config to basically refresh the state of a differential query. when you increment epoch, the counter 0 of that epoch will contain all of the results so far. so you can use that to validate the state of any data models that you’ve built from the reconstruction of differential queries (for example)