6 skills: osquery-query-helper, windows intrusion timeline (targeted), suspicious powershell hunt (cross-platform ideas) +3 more
GitHub