@Woogs, imo teh cleaner solution would be to take your python script and just have it hook the osquery(i/d) socket