Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

Data from executing the same query with `sudo osqueryd --S --json`
```
[
   {
      "proc.cmdline":"sudo echo Osquery slack",
      "proc.parent":"25159",
      "proc.parent_cmdline":"bash",
      "proc.parent_pid":"/bin/bash",
      "proc.path":"/usr/bin/sudo",
      "proc.pid":"26884"
   },
   {
      "proc.cmdline":"echo Osquery slack",
      "proc.parent":"26884",
      "proc.parent_cmdline":"sudo echo Osquery slack",
      "proc.parent_pid":"/usr/bin/sudo",
      "proc.path":"/bin/echo",
      "proc.pid":"26885"
   }
]
```