In many cases, if an event is of sufficient interest to be collected, other, related events may be appropriate for collection as well.
If an encrypted file is uploaded to a web page, an earlier event might comprise the encryption of the file itself.