Hi folks. I wanted to checkin on where we are with 5.8 • I see the ETW events table was renamed. Was there anything else? • I think Stefano’s various library PRs all merged • @alessandrogario Should we merge in https://github.com/osquery/osquery/pull/7773 I think it would also be good to get some small fixes/features in: • https://github.com/osquery/osquery/pull/7916 • https://github.com/osquery/osquery/pull/7803 • https://github.com/osquery/osquery/pull/7801

I've rebased my PR, so it should be easy to merge now 🙂

I can review, and probably give it a quick thumb.

Windows ETW should be ready to merge but someone besides me needs to approve it.

Approved

@seph is it easy for you to finish the review/merge of https://github.com/osquery/osquery/pull/7801? Having the epoch saved correctly for the events tables would fix the client continually logging that the epoch changed for a query (even when it hasn't)