drop twilio sms / voice log export · parse messages + call records · timeline + findings + actor inventory · runs locally
flags SIM swap patterns · toll fraud bursts · geo anomalies · subaccount creation · off-hours · volume spikes · bulk suspicious ops
heuristic screener · export schema varies by tenant/version · column mapping is best-effort · parses artifacts locally · not definitive proof