quick question: does fleetctl hit an API endpoint to retrieve and run queries? I am asking because I cannot find an API endpoint to do this with regular curl line.

Hi Brandon, with respect to run one-off queries (aka live queries) you can use the following API https://github.com/fleetdm/fleet/blob/main/docs/01-Using-Fleet/03-REST-API.md#run-live-query

checking it out now! TY