Osquery

New features include

4094 Add opt-in write-support for extensions
4224 Add SELinux event recording on Linux
4626 Add number monitoring system concept

Bug fixes

4416 Added custom version of realpath
4599 Resource protection for udev structures
4579 Fix case where regular files were reported as symlinks
4695 Fix use of incorrect directory separator
4686 Improve etc_hosts table data
4647 Improve audit-based table performance

Added table `ntfs_acl_permissions` to Microsoft Windows

Added table `process_namespaces` to Linux
Removed column `cgroup_namespace` (`TEXT_TYPE`) from table `processes`
Removed column `ipc_namespace` (`TEXT_TYPE`) from table `processes`
Removed column `mnt_namespace` (`TEXT_TYPE`) from table `processes`
Removed column `net_namespace` (`TEXT_TYPE`) from table `processes`
Removed column `pid_namespace` (`TEXT_TYPE`) from table `processes`
Removed column `user_namespace` (`TEXT_TYPE`) from table `processes`
Removed column `uts_namespace` (`TEXT_TYPE`) from table `processes`

Added table `battery` to Darwin (Apple OS X)
Added table `cpu_info` to Microsoft Windows
Added table `memory_array_mapped_addresses` to POSIX-compatible Plaforms
Added table `memory_arrays` to POSIX-compatible Plaforms
Added table `memory_device_mapped_addresses` to POSIX-compatible Plaforms
Added table `memory_error_info` to POSIX-compatible Plaforms
Added table `ulimit_info` to POSIX-compatible Plaforms
Added column `readonly_rootfs` (`INTEGER_TYPE`) to table `docker_containers`
Added column `directory` (`TEXT_TYPE`) to table `python_packages`
Added column `arch` (`TEXT_TYPE`) to table `signature`