Some events are tagged as Unknown in the Audit Report