Investigation of database content, metadata, and cache to verify the actions of a database user or indicate evidence of dishonest actions