Did a quick search and found a security report on osquery commissioned by Facebook, done by NCC in ~2016. https://www.nccgroup.com/ae/our-research/osquery-application-security-assessment-public-report/. Has there been any more recent security audit of osquery itself? (topic came up somewhere else, and I was curious)