Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

Can anyone give me an example of a long-running osquery command?

Something that consumes a lot of resources?

but yes, something that uses a lot of resources would be good

```osquery&gt; .timer ON
osquery&gt; select count(*) from processes;
+----------+
| count(*) |
+----------+
| 400      |
+----------+
Run Time: real 0.003 user 0.001090 sys 0.001459
osquery&gt; select count(*) from processes, processes;
+----------+
| count(*) |
+----------+
| 160000   |
+----------+
Run Time: real 0.417 user 0.137328 sys 0.279141
osquery&gt; select count(*) from processes, processes,processes;```

That will give you exponential growth on runtime

Adding a hashing will consume resources and take longer. 