hrmm. Afaik, there are a few that may allow you to define a few alert type options, but by and large the alerting part is left to you as a user. The idea is that osquery provides teh data, these tools provide the orchestration and then its up to you to decide what you want to do with the data you recieve