seems to me if you take out patching and configuration, OSQuery could do a lot of what a tool like Tanium does. Trying to make a case for going with OSQuery in our org; hence the post here in #C08V7KTJB