drop saas audit log csv exports · actor + resource cross-service timeline · runs locally
drop saas audit log csv exports · local only
heuristic screener · vendor schema varies · not definitive proof