I know that rekall included osquery in their “agent” formulation a while back to be able to use osquery to interrogate system state — could you turn that on its head, and use rekall as a separate module for osquery to leverage to gather the memory side of things? (just spit-balling)