(I didn't know this, but osquery's query language is sqlite3, so you can google for that)