Chapter 5 - Paper Trails and Cold Trails
I left Room 418 with a mission. I needed to secure the digital evidence before Dr. Cole or Daniel Mercer could find a way to permanently erase or overwrite the system logs. In a hospital, every keystroke on a terminal is logged, but if a high-level administrator with database privileges intervened, logs could be "archived" or made difficult to retrieve without a court order.
I needed an ally. Fortunately, the night-shift IT administrator was Leo, a brilliant, caffeine-fueled tech-head who spent his nights in the basement server room, surviving on energy drinks and online strategy games.
I descended into the bowels of the hospital, navigating the maze of concrete corridors until I reached the heavy security door of the IT department. I knocked rapidly.
Leo opened the door, a half-eaten slice of pizza in his hand. "Rachel? What are you doing down here? Did the maternity printer jam again?"
"Worse, Leo. I need an audit log dump, and I need it now."
I quickly explained the situation. As I spoke, Leo’s casual demeanor vanished. He set his pizza down, his eyes widening.
"Changing a birth record across midnight to beat a death certificate?" Leo muttered, sitting down at his dual-monitor workstation. "That’s not just a policy violation; that’s major corporate fraud. If Cole did this, he had to use his master clinical credentials."
Leo’s fingers flew across the keyboard. The green and white lines of code reflected in his glasses.
"Okay, let's see," Leo murmured. "Patient: Noah Mercer. Let's pull up the transaction history for his electronic health record... Ah, here it is."
He pointed to the screen.
00:07:14 - EHR Created. Birth Time: 12:07 a.m. User: Nurse Sarah (authorizing witness).
00:32:41 - EHR Modified. Birth Time Changed to 11:54 p.m. Discrepancy Note Added. User: Dr. Adrian Cole.
"Look at this," Leo said, zooming in on another set of parameters. "Cole didn't just modify the time. He tried to delete the original metadata packet. But our system has an unalterable write-once-read-many (WORM) backup drive for legal compliance. The original entry is preserved in the raw server logs. He can't touch that."
"Can you print that log and sign it as the system administrator?" I asked.
"I can do better," Leo said, pulling out a secure, encrypted USB drive. "I'll download the entire cryptographically signed audit trail, along with the network clock sync verification logs, proving the delivery room clock was perfectly synchronized at midnight. I'll print a physical copy for you, too."
The printer in the corner began to hum, spitting out pages of dense, timestamped code.
May you like
"This is dynamite, Rachel," Leo said, handing me the warm papers and the USB drive. "But be careful. Daniel Mercer has half the board of trustees in his pocket. If they catch you with this, they won't just fire you—they'll try to ruin your reputation."
"They can try," I said, tucking the documents securely inside my clipboard. "But I've got a mother and two children to protect."
