drop eset protect event log · runs locally
detection events · policy actions · local export only
heuristic screener · vendor schema varies · not definitive proof