@thor Thanks for merging: https://github.com/facebook/osquery/commit/6fab8b60839d8c640fc3826e97c8cf2950f1d89e Folks, if you want to differentiate between initial add records (all records you get when the query is run for the first time) vs subsequent delta add records, you can do that now. See ^^