Tag - forensic link analysis