I think my favorite part of osquery is how there is like no learning curve for anyone somewhat versed in systems administration. Its a brilliant concept