Category correlating network host forensic data