@Mike Myers Thank you, I will surely join that channel! I am currently getting an error building. Initially it was that sdk.h was not found, so i changed include to sdk/sdk.h.

[ 96%] Building CXX object external/CMakeFiles/external_extension_example.dir/extension_example/example_extension.cpp.o

[ 96%] Built target plugins_logger_awskinesis

[ 96%] Built target plugins_logger_tlslogger

[ 96%] Built target plugins_logger_awsfirehose

[ 97%] Built target osquery_tables_events_eventstable

[100%] Built target osquery_tables_system_systemtable

[100%] Built target osquery_tables_applications

[100%] Built target osquery_tables_networking

[100%] Generating amalgamation file for the native tables...

[100%] Generating amalgamation file for the foreign tables...

Scanning dependencies of target codegen_foreign_tables

Scanning dependencies of target codegen_native_tables

[100%] Building CXX object specs/CMakeFiles/codegen_foreign_tables.dir/amalgamated_foreign_tables.cpp.o

[100%] Building CXX object specs/CMakeFiles/codegen_native_tables.dir/amalgamated_native_tables.cpp.o

/home/usama/osquery/external/extension_example/example_extension.cpp:16:13: error: virtual function 'generate' has a different return type ('vector<osquery::Row>') than the function it overrides (which has return type 'vector<osquery::TableRowHolder>')

QueryData generate(QueryContext& request) override {

~~~~~~~~~ ^

/home/usama/osquery/build/ns_osquery_core/osquery/core/tables.h:727:21: note: overridden virtual function is here

virtual TableRows generate(QueryContext& context) {

~~~~~~~~~ ^

/home/usama/osquery/external/extension_example/example_extension.cpp:32:23: error: expected ';' after expression

osquery::Initializer runner(argc, argv, ToolType::EXTENSION);

^

;

/home/usama/osquery/external/extension_example/example_extension.cpp:32:12: error: no member named 'Initializer' in namespace 'osquery'

osquery::Initializer runner(argc, argv, ToolType::EXTENSION);

~~~~~~~~~^

/home/usama/osquery/external/extension_example/example_extension.cpp:32:24: error: use of undeclared identifier 'runner'

osquery::Initializer runner(argc, argv, ToolType::EXTENSION);

^

/home/usama/osquery/external/extension_example/example_extension.cpp:38:5: error: use of undeclared identifier 'runner'

runner.requestShutdown(status.getCode());

^

/home/usama/osquery/external/extension_example/example_extension.cpp:42:3: error: use of undeclared identifier 'runner'

runner.waitForShutdown();

^

6 errors generated.

make[2]: *** [external/CMakeFiles/external_extension_example.dir/build.make:83: external/CMakeFiles/external_extension_example.dir/extension_example/example_extension.cpp.o] Error 1

make[1]: *** [CMakeFiles/Makefile2:31699: external/CMakeFiles/external_extension_example.dir/all] Error 2

make[1]: *** Waiting for unfinished jobs....

[100%] Linking CXX static library libcodegen_foreign_tables.a

[100%] Built target codegen_foreign_tables

[100%] Linking CXX static library libcodegen_native_tables.a

[100%] Built target codegen_native_tables

make: *** [Makefile:172: all] Error 2