hey @fritz thanks again for this great writeup - used it last night, saved me alot of time: https://www.kolide.com/blog/how-to-deal-with-dates-and-times-in-osquery

I feel like most of what I have written with regards to SQL/osquery has been my way of taking notes that I can refer back to personally when I forget how to do something 😉

yep I hear ya