/proc/thread-self/root/etc/osquery/