auditing and correlation