This whole article is fantastic, but already at the start, the SQLite virtual tables thing is blowing my mind.

https://www.sqlite.org/vtablist.html

You can "mount" your filesystem (or anything else) as a SQL database, wtf. That's amazing.

This sounds like it could be extremely useful.

Check this out: https://github.com/osquery/osquery