SQL-based cross-drive analysis correlation