the (windows) application seems to use CreateProcess with the query as a parameter: "C:\Program Files\test\OSQuery\osquery-4.0.2\osquery\osqueryi.exe" --json "select * from programs where name = 'Npcap';"