ok. I'm trying to clarify that osquery will allow you to detect changes/get inventory data but it will not handle remediation for you (like applying a patch)