Systems, methods and tools for performing a root cause analysis and improvements to the root cause detection by changing the way analysts and troubleshooters interact with the error reporting files to detect injection points that indicate the root cause of a system error. The systems, methods and tools record the observable behavior of users as the users review files to identify behavioral clues of the user to infer a level of interest in sections of the files being viewed. The systems identify correlations between user behavior and emotive expression to calculate a probability of event data being the root cause of an error. The systems may manually or automatically generate one or more tags in the reviewed file for each of the sections of the file that has a probability of being a root cause of a defect and the tags may vary as a function of the probability.