Keeping an Eye on Linux Servers (osquery tutorial)
hackertarget.com