Look out endpoint vendors, you've got competition in your mirror (osquery/Win32) (blog.trailofbits.com)