The general idea is to use the augeas integration in osquery to get to config/other files of all sorts;