osquery-1/tools/tests/test.config

{
  "scheduledQueries": [
    {
      "name": "time",
      "query": "select * from time;",
      "interval": 1
    }
  ],
  "threat_intel" : {
    "file_paths": {
      "downloads": [
        "/Users/%/Downloads/%%"
      ],
      "system_binaries": [
        "/bin/%",
        "/usr/bin/%",
        "/usr/local/bin/%"
      ]
    }
  }
}