Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

<https://www.reddit.com/r/osquery/comments/116l2dy/what_does_ppid_1_mean_in_osquery_kibana_logs/|What does PPID: -1 mean in Osquery (kibana logs)>
Hey all!! Just curious if anyone knows if PPID equaling -1 is a bug? Not too much to go with looking at google so just dropping it here.    submitted by   <https://www.reddit.com/user/yarning67| /u/yarning67 > 
<https://www.reddit.com/r/osquery/comments/116l2dy/what_does_ppid_1_mean_in_osquery_kibana_logs/|[link]>   <https://www.reddit.com/r/osquery/comments/116l2dy/what_does_ppid_1_mean_in_osquery_kibana_logs/|[comments]>