Production-ready detection and response queries for osquery

github.com

20 pointsankitg121 comment

The README needs to say in plain words what it is. My best guess is something to do with intrusion detection, and finding rootkits, maybe?