@alessandrogario I made an example extension https://github.com/groob/osquery-effigy The readme has the relevant links to the extension documentation