there’s an osquery extension for it too