drop imperva waf audit export · parse policy + signature + client · runs locally
drop imperva waf audit export · local only
heuristic screener · vendor schema varies · not definitive proof