dnswatch is an offline, read-only triage aid. Analyze only logs and systems you are authorized to inspect. Use synthetic Zeek logs when developing or testing changes.

Please do not put credentials, private logs, or exploit details in a public issue. Open a private GitHub security report when available, or contact the maintainer through the GitHub profile with a minimal reproduction and the affected version.