drop google account security events export · parse recovery + password change events · flag mfa recovery changes · csv/json export · runs locally
Recovery email · password change · 2FA · backup codes · suspicious sign-in
heuristic screener · export schema varies by account/version · local parse only