(low pri) we might want to reconsider the in-progress work from https://github.com/osquery/osquery/pull/5257 https://github.com/osquery/osquery/pull/5268 https://github.com/osquery/osquery/pull/5285 if anyone has time to review + reopen as a new PR

One of my Q1 tasks is to pick up packetzero's upstream contributions. I will be auditing differences in our 3.3.1 fork to understand the path to rejoining upstream.

Thanks @verntx, that’s great news! Feel free to reach out here at anytime if you have questions or need a hand