drop mailchimp campaign + activity export · parse send + open + click + unsub events · timeline + findings + actor inventory · runs locally
flags list export spikes · role changes · unusual send volume · click fraud · off-hours · volume spikes · bulk destructive
heuristic screener · export schema varies by tenant/version · column mapping is best-effort · parses artifacts locally · not definitive proof