drop deception credential export · detect decoy credential authentication · runs locally
drop deception credential export · local only
heuristic screener · vendor schema varies · not definitive proof