<@U9AKDE7V0> it really depends. You can benchmark...
# general
c
@yathi it really depends. You can benchmark basic things, but your osquery config greatly determines its performance. If you were to enable FIM on all files, you will probably tank most machines