Automatic Fileless Malware Detection via eBPF Probes and LLMs
eBPF kernel hooks give LLMs direct system state access without command probing.
tail -f for SQLite. Every statement any process on the box runs against libsqlite3 — the SQL (syntax-highlighted), the values bound to its ? placeholders, the per-step latency and result code — decoded and streamed live to your terminal. No cooperation from the traced apps, no recompile, no PRAGMA.
Kernel-level SQLite tracing with eBPF uprobes requires zero app cooperation or code changes.
Backend developers debugging SQLite in production
SQL-tap · sqlite3 CLI · Database profilers
eBPF kernel hooks give LLMs direct system state access without command probing.
Direct eBPF kernel tracing beats slow CLI probing for AI sysadmin tasks.
SQLite queries in Brainfuck via raw bytes and Linux pipes, no C helpers.
Slack data export to SQLite with FTS5 and Socket Mode live tailing—real alternative to Slack search lock-in.
TUI for nested Stripe JSON beats squinting at Stripe CLI logs.
Local-first agent memory with MCP server when Cursor and LangSmith already exist.