Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

Any alias fixes this issue, however in 3.3.2 this wasn't required as results were like `proc.pid` etc. It would be painful to add aliases across all configs:(

Are you sure? I think I remember having un-namespaces column names in osquery going way back. 

IMG_20190816_200402_042.jpg

Yep, I was confused when it happend and double checked with my old snapshot.

<@U0JFM04MS> Do you know if there is a way to determine intended behavior? I would adjust my queries accordingly.