Depends on what you’re comfortable with. The above links are how several of us use the osquery go sdk to write things. You could also start with https://osquery.readthedocs.io/en/stable/development/osquery-sdk/