Require suggestions in order to get output threat records for the Osquery and reduce false positives I was developing SQL Osquery to find connection details which uses process tables, process open sockets tables. I have developed the below Osquery to monitor and identify security threats in the connections. This Osquery is only generating false positives and it is unable to generate threat records, which can help in the threat detection. The current output records have false positives - osqueryd, ssm agent and orbit. These records are not associated to any threats. The goal is to modify the...