Critical2bad135b-9c65-4ee8-8be1-eb8fd44b8bb7New

Audit trail disabled on System SYS-1

Source evidence

Why flagged

'audit_trail' set to 'disabled' by 'admin.root'.

Detection metadata

Detection method: Deterministic rule
Rule / model: DR-003 v1.0.0
Detection confidence: 0%
Source system: Unknown Unknown n/a
Site: d0d0d0d0-0000-4000-8000-000000000001
Actor: admin.root (System Admin)
Occurred (UTC): 2026-08-26 10:00:00 UTC
Detected (UTC): 2026-08-26 10:00:00 UTC
Source timestamp: 2026-08-26T03:00:00
Parser: csv_audit v1.0.0

Changed value (before / after)

Before / afteraudit_trail

CONFIG_CHANGE · 2026-08-26 10:00:00 UTC

Before

enabled

After

disabled

Reason for change:maintenance window

Electronic signature:No

Evidence integrity

Evidence hash (SHA-256)Verified

7b732f5555f5777b607f352cb93bdaab671fde123bf06d5a87f63de77cd773e9

Object:: 5304a33d-edbb-4616-ac49-2b410ea6d5b7
Captured:: 2026-08-26 10:00:00 UTC

Cross-system relationship timeline

No related cross-system events correlated for this finding.

Risk dimensions

Customer-configurable scores (0–5). These are not FDA-prescribed defaults.

Product impact4/5
Patient impact4/5
Data-integrity impact5/5
Record criticality5/5
Detectability3/5
Recurrence2/5
Security relevance4/5

Reviewer history

Disposition history

No disposition recorded yet.

AI-assisted analysis (separated)

Rendered in a distinct panel below. AI is assistive only and is not source evidence.

AI-GENERATED ANALYSIS — NOT SOURCE EVIDENCE

Assistive context only. This analysis is not source evidence, does not approve or reject any record, and does not constitute a reviewer disposition. Verify all statements against the source evidence.

Summary

Assistive summary generated from the provided evidence.