If anyone is interested, I wrote a blog post about how to do some basic admin tasks using osquery on macOS - more sysadmin than security, but showing the versatility of the tool. https://www.uptycs.com/blog/basic-macos-system-monitoring-with-osquery-video