Process mining is a process management technique to extract knowledge from the event logs recorded by an information system. The authors show how applying an appropriate semantic lifting to the event and workflow log may help to discover the process that is actually being executed. In particular, they show how it is possible to extract not only knowledge about the structure of the process, but also to verify if some non-functional properties, such as security properties, hold during the process execution.