begin modeling specific audit events