Use the word "atypical" instead. If your audit system knows that this application never runs such queries, and today it did, it knows something changed and fla

Use the word "atypical" instead. If your audit system knows that this application never runs such queries, and today it did, it knows something changed and flags it.