I was thinking, osquery provides the capability for job control over asking nodes questions... i could do this with powershell