@rmcvey what I was trying to say is that using thrift with the socket + osqueryi might be a good first step if osqueryd is a concern