I'd recommend checking out our docs, as the first few paragraphs should hopefully give you a good idea of what osquery is, and how it can be used to suite your needs: https://osquery.readthedocs.io/en/stable/