Sql audit can track who made changes in general, and when, but to the best of my knowledge cannot say what row changed, but not whether your statusflag column was involved.

I believe extended events can catch who, when and imply the what, but not whether it was rowid 42 or whatever. i think EE can filter on the update statement containing the string value of the column, so it might know if the column was involved. someone stronger in extended events might know better.

Change tracking and change data capture can capture the details of what changed and when, but not the who did it.

Afaik only a trigger can capture all three.