`strace`ing osqueryi when I run this command, i see the following:

sudo strace -p 9544 -estat,open,read

read(0, "[", 1)                         = 1
read(0, "A", 1)                         = 1
read(0, "\r", 1)                        = 1
stat("/proc/10683", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
stat("/proc/10683/stat", {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
open("/proc/10683/stat", O_RDONLY|O_NONBLOCK) = 9
read(9, "10683 (x) S 10439 10683 10439 34"..., 4096) = 315
read(9, "", 4096)                       = 0
stat("/proc/10683/status", {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
open("/proc/10683/status", O_RDONLY|O_NONBLOCK) = 9
read(9, "Name:\tx\nState:\tS (sleeping)\nTgid"..., 4096) = 955
read(9, "", 4096)                       = 0
stat("/proc/10683/cmdline", {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
open("/proc/10683/cmdline", O_RDONLY|O_NONBLOCK) = 9
read(9, "/bin/bash\0/tmp/x\0", 4096)    = 17
read(9, "", 4096)                       = 0
stat("/bin/bash", {st_mode=S_IFREG|0755, st_size=1037528, ...}) = 0