Tag forensic audit investigation