We've open-sourced phantomfleet, a synthetic osquery fleet in one Go binary. It enrolls simulated Linux, macOS and Windows hosts into osctrl, Fleet or any osquery TLS server, then answers distributed queries with schema-shaped rows, so you don't need osquery or real endpoints. It includes "Example Corp", a fictional 15-host estate with something to hunt for. MIT licensed, built on osctrl's fake_news (thanks, @javuto). 💻 GitHub: github.com/huntbase-io/phantomfleet Bug reports about servers or queries it gets wrong are very welcome.