Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

```
Every 2.0s: ls /var/log/osquery/osqueryd.* /tmp/osqueryd.*                                                                                                                                            ribos.local: Tue May 29 16:34:41 2018

/tmp/osqueryd.INFO
/tmp/osqueryd.WARNING
/tmp/osqueryd.ribos.local.root.log.INFO.20180529-163435.14320
/tmp/osqueryd.ribos.local.root.log.INFO.20180529-163435.14321
/tmp/osqueryd.ribos.local.root.log.WARNING.20180529-163435.14321
/var/log/osquery/osqueryd.INFO
/var/log/osquery/osqueryd.INFO.20180529-163436.14321
/var/log/osquery/osqueryd.results.log
```