If I query

known_hosts

from osquery, it'll be parsed and returned. However, if you

cat ~/.ssh/known_hosts

, you'll see the same output