Did you look at <https://osquery.readthedocs.io/en...