That sort of behaviour is against the unwritten rules of osquery and normally advised to be put into an extension.