Splitting credential harvester takedowns from broad zone monitoring. managing state drift across two pipelines : r/threatintel