A customer recently showed me that the built-in ACS report "Forensic_-_All_Events_For_Specified_User" seemed to be missing some events. This report queries the Adtserver.dvall5 view in the OperationsManageAC database and looks for values in the PrimaryDomain\PrimaryUser
