If you don't mind my asking, what is the end goal of the query you are writing? I am always excited by osquery SQL theory-crafting