I had an employee delete a file on a drive on one of our servers. Is there a command to trace the person down?