Why create 100 different queries looking for specific launchd agents when you can write one query to look for concerning entries (for example, looking for launchd entries that are pointing to unsigned libraries running out of a tmp folder)