Sophisticated data theft and other covert malicious actions by Insiders can involve covering their tracks with tools to erase data, hide data or even appear to be activities other than what actually occurred.