On prem? or in the cloud? If in the cloud I would say tie together some AWS/Azure/GCP APIs for listing machines and compare that to the list of machines you have where your osquery data lives