What does DL NAS Transport do in 5G?

It carries an embedded payload from the network down to the UE using NAS transport handling.

Is DL NAS Transport itself the main procedure?

Usually no. It is often a wrapper, and the real procedure meaning comes from the transported payload.

What should engineers inspect first?

Start with the payload container type and then decode the inner payload.