drop quickbooks online audit log · parse transaction + change-log entries · timeline + findings + actor inventory · runs locally
flags user role grants · bank account changes · vendor payment edits · bulk transaction deletes · off-hours · volume spikes · bulk destructive
heuristic screener · export schema varies by tenant/version · column mapping is best-effort · parses artifacts locally · not definitive proof