What would you do with billions of events and measurements from dozens of different data sources that can be tied back to tens of thousands of companies? Would you look for patterns and figure out which ones are good indicators of bad security? This session will explore theories of OS monoculture, attack surface and diligence as well as exploring the trends over time.