But osquery is quite extendable, and if there's something you want to ask that osquery isn't giving you, you could probably get it with a python/C++ extension, and then make that data accessible via the osquery daemon