osquery> select pid,name,uid,resident_size from...
# general
r
osquery> select pid,name,uid,resident_size from processes desc group by name limit 10; +------+---------------------------+------+---------------+ | pid | name | uid | resident_size | +------+---------------------------+------+---------------+ | 816 | LogonUI.exe | 0 | 12509184 | | 5256 | MSASCuiL.exe | 1001 | 2482176 | | 1600 | Memory Compression | 0 | 8302592 | | 1628 | MsMpEng.exe | 0 | 79425536 | | 2368 | NisSrv.exe | 0 | 7507968 | | 5344 | OneDrive.exe | 1001 | 11001856 | | 3672 | RuntimeBroker.exe | 1001 | 36159488 | | 680 | SearchIndexer.exe | 0 | 20422656 | | 5356 | SearchUI.exe | 1001 | 127213568 | | 1572 | SecurityHealthService.exe | 0 | 4509696 | +------+---------------------------+------+---------------+