I'd like something that integrates canned DTrace/eBPF scripts, along with authorization (some canned scripts might leak sensitive data). Really, a bit of an idempotent, extensible, remote OS observability protocol.
[0] https://en.wikipedia.org/wiki/Windows_Management_Instrumenta...