// SAMPLE DELIVERABLE
SECURITY WATCH REGISTER — MERIWETHER LAW, LAST 7 DAYS
Aug 2–8, 2026| Event | Actor | Assessment | Verdict |
|---|---|---|---|
| 142 document views | 11 staff | within normal pattern | normal |
| 38 external shares | 6 staff | all to known client domains | normal |
| Access request — case files (extern.) | expert witness Dr. Hale | gated, approved by you Aug 5 | approved + logged |
| Bulk download — 214 files, 02:40 | paralegal account m.torres | anomaly — flagged to you | |
| 3 failed logins, new device | partner account | MFA held; device verified Aug 7 | resolved |
M. Torres’s account pulled 214 files (cases closed 2021–2023) at 02:40 from a residential IP 40 miles from the office. Could be legitimate remote work — but it matches no pattern in 9 months of baseline. The session is logged, not blocked. Your options: verify with her directly, or I revoke the session token pending confirmation. Evidence pack attached.
Access log · baseline behavior model 9 mo · IP geolocation, Aug 8, 2026 03:05
Register #26 · 1 anomaly flagged with evidence · zero false escalations this month
Document watch, access gating, anomaly flags with evidence — and answers cited from your docs, never invented.
Hire Ragnar — $299/moSecure checkout · cancel any month · back to ragnar.buzz
© 2026 ROIZILLA, LLC. All rights reserved.