A model of forensic analysis using goal-oriented logging