Anyone have thoughts on dropping StreamAlert on the osquery site and adding the ToB extensions? StreamAlert is cool and all, but it could be nice to focus more on osquery-specific things.

sounds good to me