Triage starts at 02:18 UTC by reading four identity signals for dax.mercer@chronos.orbital. Read each signal against a benign pattern and a compromise pattern.