Hi osquery reviewers! I opened a new blueprint for making schedule epoch and counter behavior more consistent, to support periodic snapshots and stream alerting from the same differential rule:
https://github.com/osquery/osquery/issues/7799
It has a couple PRs and draft commits for proposed implementation - curious what people think when you have time 🙂