@benbass general rule of thumb for me is that if you can produce the data somehow, you can turn it into an osquery table. This is really similar to some work I did a few years ago for getting DNS logs into osquery. You need to proxy the connections "somehow". How you do that is pretty open ended, but it's definitely doable.