I'm thinking it might be possible to have an extension that copies a cookie in to a predictable file path for instance, and have osquery trigger on changes to that file