Is it possible that osquery found something bad, stored it in the DB, and then Defender found it in the osquery DB?