I wrote an article about osquery architecture that some of you folks would probably be interested in: https://blog.kolide.com/osquery-under-the-hood-c1a8df46bb7a

thanks