Testing PolyMon for one week -
1. Scheduled queries not working.
2. Packs also not working from osquery side.
3. RealTime events works good, as expected
4. UI Polymon - sometimes after closing not work and can't to be executed.
5. One moment with UI - very hard working without fullscreen mode 😞
Sysmon vs Polymon
app launch in domain with dynamic profiles
All in default configuration - polymon faster in 15-20% 🙂