Inventory and harvest every Jira/Confluence attachment an authorized user can read, then sweep the corpus for credentials and sensitive files. Use when a low-priv ticketing user is the foothold.