if the results of

osqueryi --json "some query" > somefile

are accurate enough to model, then that's good enough for me