drop ztna session export · detect impossible travel access patterns · runs locally
drop ztna session export · local only
heuristic screener · vendor schema varies · not definitive proof