We recently had a request from a user for info about the MRT (Malware Removal Tool), unfortunately this path is prevented from being read by the

apps

table:

osquery> SELECT * FROM apps where path = '/Library/Apple/System/Library/CoreServices/MRT.app';
osquery>