https://github.com/osquery/osquery/pull/7821 - @thor this one is actually pretty new, but could you please lend a hand with your Windows expertise?