Is it possible to find immutable files in osquery?