where does the

tools

directory live? I don't see anything in

/etc/osquery

, is there something that should be installed from the rpm?

Nope, this is not installed. It’s only available in source.

Is there a way I can get it installed w/o building from source?

What are you trying to do specifically? I ask because there is a lot of stuff in tools, some of it depends on setup the build scripts perform, some of it is generic scripting.

query performance analysis mostly