drop umbrella dns log export · parse category + identity + block/allow · runs locally
drop umbrella dns log export · local only
heuristic screener · vendor schema varies · not definitive proof