Report from #C01DXJL16D8 since I think that's being used for git... Anyone mind dropping some community packs/queries? Here are some links I have found that have syntax (good or bad lol): https://github.com/osquery/osquery/tree/master/packs https://resources.infosecinstitute.com/topic/threat-hunting-with-kolide-and-osquery/ https://github.com/palantir/osquery-configuration https://engineering.fb.com/2014/10/29/security/introducing-osquery/ https://www.alibabacloud.com/blog/server-endpoint-security-with-osquery_594950?spm=a2c41.13076147.0.0 https://github.com/teoseller/osquery-attck

@arod Also just found this repo: https://github.com/Kirtar22/ThreatHunting_with_Osquery

Nice. Thanks @SK