:thumbsup: <warning type='koolaid'>Oh yeah, ...
# general
m
👍 <warning type='koolaid'>Oh yeah, in a pretty big way. At the base of GDPR (and many other regulatory frameworks) lies the requirement to implement effective intrusion detection systems. Article 32 of GDPR specifies this - https://gdpr-info.eu/art-32-gdpr/. An intrusion detection system based on osquery has some huge advantages, the biggest one being it is open source, therefore, transparent. It allows us all to reason about the data osquery collects and take whatever action is appropriate to achieve a compliant use of osquery, some ideas around which I tried to outline in my blog. Blackbox/proprietary systems would be challenging on this front.</warning>