Yes, and @rhuber is in #C0F5EQH28 IIRC there hasn't been a comparison between the two. And we don't really talk about process auditing with osquery.