Codex scanned my whole Arch Linux system, documented all the findings, and wrote the queries for my IDS to keep a watch for exfil and other IoCs. Set up the alerts for me too.

The queries kinda sucked at first, but it was pretty awesome to get to spend more time with my kids while Codex would manage the incident response for me.

perhaps that's the grift to handle lack of compute, they just switch you to a lesser model and gaslight you into thinking you triggered a filter, but the reality is they don't have the compute for it.