@clippy I'll have to look into hooking into the socket (do you know where I can find docs on the socket?), I agree just executing the osquery binary from python isn't the best, but frankly was quick and easy for my novice python skills and I figured I'm at least dropping a fresh osquery binary when I execute the python script, so I at least know the binary is safe. Agreed though, not the most ideal situation