I'll be in office hours this friday (actually to talk about the ATT&CK concept) if it would be easier to talk in person. looking forward to the feedback, I'll be happy to accomodate.

Hey @5twenty9 I would like to contribute to this idea. Please ping me.

I'd love to help too. Putting some time at ATT&CK and correlate with osquery would be great 😃

@Srikanth Suresh @spookerlabs I'll keep you in the loop.

@5twenty9 @dallendoug I have started some of this around persistence, specifically for some training I am working on: https://www.screencast.com/t/DkIXvctlT

I’m unfortunately going to be in Malaysia for FIRST next office hours, but carry on without me! I’ll talk to some of the folks there (several folks from MITRE will be there) about a possible plan on their end, and then we should probably do a separate video call outside of office hours at some point.

this is great thanks @dallendoug