Anyone have a list of helpful queries they run on Linux? I've seen alot of repos sharing helpful queries for Mac, but haven't seen many for Linux specifically.

Maybe you can find something interesting in https://github.com/chainguard-dev/osquery-defense-kit