Guys, going to speak tomorrow and saturday down here in Brazil about OSQUERY -> Fleet -> Elastic Stack and 2 curiosities : - Is there same big case public and number of endpoint being monitored just ? - do you guys have been using YARA table in general ? Works fine ? and if there is a blog post more specific about using this table.