Even without carving it, asking for C:\Users\SeriousUser\Invoice.docx via osquery isn't a thing to my knowledge. In GRR, for instance, it is.