@spookerlabs looks good, will have to give it a try. Do any of these managers - or osquery itself / have ways to send this data elsewhere?