@thor heh, getting osquery deployed is easy, figuring out how to get value out of it is trickier 🙂