Am working on something that translate some IoC’s we have in our threat intel platform into osquery checks