idk if osquery has something similar