drop vectra detection export · parse priority + entities · runs locally
detection priority · entities · threat categories · local only
heuristic screener · vendor schema varies · not definitive proof