Thanks @coffee.... Is there any central place that HIDS-type rules have been dropped, besides the packs page? https://osquery.io/docs/packs/