drop ringcentral admin call log · parse calls + sms + voicemail
flags voicemail access bursts · SMS spikes · international routing · timeline + severity/reason
heuristic screener · export format varies by admin portal — not definitive proof