osquery has a huge span of use cases and has deep roots in system native apis, checkout a recent development in file access monitoring with osquery: https://material.security/blog/protecting-the-security-and-p....