https://github.com/osquery/osquery/pull/7751 - @Stefano Bonicatti do you think you could take a look at this one?