[Osquery_manager] Add better forensics saved queries

[tomsonpl]

DONT MERGE

This PR serves as a temporary 'main' to which we'll be adding PRs on a artifact by artifact basis.

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: 43e4d46

History

• 💚 Build #33788 succeeded e1f4d3a

cc @tomsonpl

[botelastic]

Hi! We just realized that we haven't looked into this PR in a while. We're sorry! We're labeling this issue as Stale to make it hit our filters and make sure we get back to it as soon as possible. In the meantime, it'd be extremely helpful if you could take a look at it as well and confirm its relevance. A simple comment with a nice emoji will be enough :+1. Thank you for your contribution!

[botelastic]

Hi! This PR has been stale for a while and we're going to close it as part of our cleanup procedure. We appreciate your contribution and would like to apologize if we have not been able to review it, due to the current heavy load of the team. Feel free to re-open this PR if you think it should stay open and is worth rebasing. Thank you for your contribution!