A good reference guide to look at it are the SDK docs (https://osquery.readthedocs.io/en/stable/development/osquery-sdk/), however these are assuming you have a thrift socket you can speak to