drop bitbucket audit log · parse repo / push / permission events
flags repo admin grants · branch permission changes · force-push patterns · secret scanning dismissals · off-hours · volume spikes
heuristic screener · export schema varies by tenant/version — column mapping is best-effort · not definitive proof