btw I never did a full proper intro/writeup on a blog for osquery, so I'm fixing that: https://gist.github.com/arubdesu/658da2369f4088dc7e746824013a11e3