drop 2+ ztna exports · unified zero-trust session timeline graph · runs locally
drop 2+ ztna exports · local only
heuristic screener · vendor schema varies · not definitive proof