Category memory forensics network connections analysis