Comment by michaelmior

osquery also has some level of setup overhead and requires a daemon running in the background. I don't think this is true of crab.