@coffee so lets say for example half the fleet got an upgrade 24 hours ago and half the fleet hasnt been upgraded in 3 months. The search window has to be pretty big to account for those types of cases, and since we’re doing process/socket auditing, its a massive amount of data to trudge through 😕