yeah, but one assumption probably is not right, there is a santa extension for osquery 😄