add osquery.bat