yeah, docs say it used to be around if you had the kext https://github.com/facebook/osquery/blob/2eadac3cc16e0a9fd7508dcd98a8187137a0f28b/docs/wiki/deployment/debugging.md#missing-event-subscribers