in general i assume the mere presence of the osquery daemon running on a system is enough to strike the fear of god into any attacker and make them logoff immediately