drop proofpoint archive export · parse policy + disposition + legal hold · runs locally
drop proofpoint archive export · local only
heuristic screener · vendor schema varies · not definitive proof