We've had numerous conversations with the Carbon Black teams, as we have loads to learn from eachother. They're doing a great job at response capabilities and flight recording, and we're not exactly in the market to replace them anytime soon 😉 That being said, there's a lot of work-arounds that'll get you sort of close to a "CB-like" experience with osquery, but it wont ever quite be the same. The spot where osquery falls a bit shorter than CB is on the backend experience, which folks like Kollide or Uptycs are working towards, but I've heard it work as a selling point to go with CB over osquery as some folks want a more rich experience on the back end, which CB provides. I definitely feel the note @clong dropped, that osquery can pair very well with carbon black, as we both provided different types/feeds/sources of data.