Anyone using osquery for that purpose?