drop rmm script deployment export · detect mass endpoint script pushes · runs locally
drop rmm script deployment export · local only
heuristic screener · vendor schema varies · not definitive proof