Category analyzing network traffic forensic investigation