drop hipaa audit logs + access exports + exfil indicators · breach scope + patient impact report · runs locally
drop hipaa audit logs + access exports + exfil indicators · local only
heuristic screener · vendor schema varies · not definitive proof