Comment by mikermcneil

(used in production directly or via major EDRs by much of silicon valley, governments, and the F1000)

Contributions: https://github.com/osquery/osquery