Forensic auditing mining