Very interesting, I hope to see your work mature. Expensive EDRs already do this well. The UI,rules and having a place to put the data is hardest part imho. Li

Very interesting, I hope to see your work mature. Expensive EDRs already do this well. The UI,rules and having a place to put the data is hardest part imho. Linux makes things difficult because so many componets are by design reused extensively. I will look into Grapl, thanks for sharing.