@Zander Mackie && @Matt Uebel Would it be possible for you to try out these packages? This is from the following PR: https://github.com/osquery/osquery/pull/7773 (packages are from this runner: https://github.com/osquery/osquery/actions/runs/3177333118)

👋 @alessandrogario I've been preoccupied today but have raised this with my team. How quickly do you need feedback in order for that feedback to be useful?

Hey Matt! There's no rush! I would like to know how better it performs on your systems, compared to the BPF tables we have in osquery core 🙂