Hope that helps!

I would also recommend joining the osquery slack: https://osquery-slack.herokuapp.com/