Hi team! We have sysmon with custom config rules, but in our plans to rewrite them in osquare polylogix. Could you recommend a few ways for it (best practice)?

The Osquery.conf provided by the polylogyx/osq-ext-bin repo on Github is a good start