Haha, yes osquery works a little bit like this, but is read only on virtual tables backed by the OS.