osquery isn’t a database, per se. It’s an API translation layer between underlying OS semantics and sql. (event tables are more like a database)