User action representation and automated reasoning for the forensic analysis of mobile devices