As @andrew mentioned, osquery is really good at representation of system state in a sql table form. So if there's questions you'd like to ask that are related to vulnerability assessment of the OS, that are representable in a table format, then you're gtg.