forensic logging: additional tests and one fix

1 job for forensic-logging in 2 minutes and 6 seconds (queued for 1 second)