Sandfly 5.5 introduces AI analysis for security events, enhanced BPFDoor malware detection, and improved scanning performance. The AI feature leverages large language models to assist in Linux security analysis, while new detections target BPFDoor's evasive techniques. A "trickle" scan mode reduces network and host impacts during scans.