@seph you can see the effigy table packaged as an extension here https://github.com/groob/osquery-effigy