@tp you may find this article helpful https://medium.com/@palantir/osquery-across-the-enterprise-3c3c9d13ec55 the author clong hangs out here as well if you have questions on their setup!