Is there a way to correlate File events (from ntfs_journal_events table) with user table so we can get user name , who is modifying the files ?