Fresh user-filed signals for osquery. Compare incoming reports with live status context and recent regional patterns.