drop crossing event log · parse activation + warning events · runs locally
drop crossing event log · local only
heuristic screener · vendor schema varies · not definitive proof