Audit

• Audit from command (audit_from_command)
• Audit from osquery (audit_from_osquery)
• Audit from Powershell execution (audit_from_powershell_execution)