user
<https://github.com/osquery/osquery/commit/0229559e7a6c4bc2de0c791485b6a0abb1fa1aa1|0229559>
yara