(and then compare with

ls /etc/osquery

on a host in which it doesn't occur)