If you can share what use-case/problem that you are trying to solve, that’d be helpful for you to provide further feedback. Osquery is very capable and can be used as a universal agent for many uses cases including: a) Intrusion/Malicious activity detection (EDR) b) File Integrity Monitoring c) Incident Investigation d) Vulnerability Detection, e) Audit and Compliance etc In all of the above, it is a valuable part of the puzzle - ie. a universal agent which provides structured telemetry. To complete the solution, you need 1) A mechanism to manage a fleet of the universal agent i.e osquery b) Ability to aggregate the osquery securely to collect the data c) A backend or data lake with streaming and historical analytics to solve the use cases.