If your audit system knows that this application never runs such queries, and today it did, it knows something changed and flags it.
If your audit system knows that this application never runs such queries, and today it did, it knows something changed and flags it.