osquery tables generally “refresh” their contents on each execution of the query