drop ztna app export · detect privileged application access bursts · runs locally
drop ztna app export · local only
heuristic screener · vendor schema varies · not definitive proof