Hi Everyone, just in case you are interested in doing IR with osquery. Check this out and let me know if you had any idea or feedback about it. https://github.com/anelshaer/Remote-Linux-Triage-Collection-using-OSquery