# Benton Flock Audit and User Export 2025-2026 Nine redacted audit PDFs use the fields `"ID"`, `"Org Name"`, `"Total Networks Searched"`, `"Reason"`, `"Case #"`, `"Search Time"`, and `"Search Type"` (`11_1_2025-11_30_2025-Benton AR PD-Audit (REDACTED).pdf`, p. 1; same layout in the other eight files). One parsed table record per audit entry yields 4,659 rows. ## Produced coverage | Export period | Parsed rows | |---|---:| | 2025-11-01 through 2025-11-30 | 340 | | 2025-12-01 through 2025-12-31 | 742 | | 2026-01-01 through 2026-01-31 | 245 | | 2026-02-01 through 2026-02-28 | 178 | | 2026-03-01 through 2026-03-12 | 186 | | 2026-04-01 through 2026-04-30 | 948 | | 2026-05-01 through 2026-05-31 | 1,109 | | 2026-06-01 through 2026-06-30 | 468 | | 2026-07-01 through 2026-07-31 | 443 | The row-count evidence is the full table in each correspondingly named `*-Benton AR PD-Audit (REDACTED).pdf`. The activity-type fields total 2,668 `lookup`, 1,257 `lookup-Mobile`, 616 `search`, 117 `search-Mobile`, and one `searchSummary-Mobile` (same nine files, full `Search Type` fields). > [!contradiction] Requested start versus produced start (T060) > The request sought retained audit records beginning 2025-01-01, while the earliest produced audit is titled `11_1_2025-11_30_2025-Benton AR PD-Audit (REDACTED).pdf`; the March file is expressly `3_1_2026-3_12_2026`. The transmittal does not reconcile those periods. Tracked at [[T060 - Benton Requested Audit Period vs Produced Coverage|T060]]. ## User export `Users_Roles_August_3_2026 (REDACTED).pdf` uses the fields `"Role"`, `"Status"`, `"User Mgmt"`, `"Search"`, `"Hotlist Tool"`, and `"Last Login"` (p. 1 and full table). Its 84 account rows comprise 82 active and two deactivated accounts. Parsed roles are 59 officer, 17 detective, five supervisor, and three blank; 81 rows show search/hotlist capability enabled, five show user-management capability enabled, and thirteen lack a last-login value. The export counts platform accounts, not current employees. Aggregate counts do not establish that every active account was used during the audit period. ## Open questions - The absent January-October 2025 exports and remainder of March 2026. - Whether account, search, and hotlist permissions were reviewed periodically and by whom. - Native audit exports preserving complete fields and export-generation metadata.