Record event when changing is_suspicious