Visualization for network forensic analyses: extending the Forensic Log Investigator (FLI)