Hey, Just released the very first version of a simple tool for those that use SaltStack. Not sure if it's any useful, but it worked for what I needed. It allows you to issue ad-hoc / distributed queries without the need for osquery's tls plugin - it uses osqueryi (you can query open network sockets and check them against threat intelligence sources) https://github.com/0x4D31/sqhunter