Also the command line flags are essential as a reference https://osquery.readthedocs.io/en/stable/installation/cli-flags/