13. A processor-implemented method to execute on one or more processors that perform the method, comprising: receiving an indication that a context associated with a source of an event is malicious, wherein the context includes information about an environment surrounding an interaction between a corresponding event and one or more functions provided by an application at a point-in-time, and wherein the event is an action capable of being monitored and recorded within a computer; transforming the event from an unmarked event to a tainted event by marking the unmarked event with the context taint; marking a prior unmarked context associated with the tainted event with the taint to create a prior tainted context, so as to propagate the taint from the tainted context to the prior tainted context, propagation of the taint being time-limited; transforming any subsequent unmarked contexts into additional tainted contexts in response to identifying the tainted event as a link between the prior tainted context and the subsequent unmarked contexts; marking any other unmarked event emanating from the prior tainted context and the additional tainted contexts as other tainted events with a common taint; and publishing an event horizon to a display, the event horizon including the tainted event and all of the other tainted events.
13. A processor-implemented method to execute on one or more processors that perform the method, comprising: receiving an indication that a context associated with a source of an event is malicious, wherein the context includes information about an environment surrounding an interaction between a corresponding event and one or more functions provided by an application at a point-in-time, and wherein the event is an action capable of being monitored and recorded within a computer; transforming the event from an unmarked event to a tainted event by marking the unmarked event with the context taint; marking a prior unmarked context associated with the tainted event with the taint to create a prior tainted context, so as to propagate the taint from the tainted context to the prior tainted context, propagation of the taint being time-limited; transforming any subsequent unmarked contexts into additional tainted contexts in response to identifying the tainted event as a link between the prior tainted context and the subsequent unmarked contexts; marking any other unmarked event emanating from the prior tainted context and the additional tainted contexts as other tainted events with a common taint; and publishing an event horizon to a display, the event horizon including the tainted event and all of the other tainted events. 17. The method of claim 13 , wherein the transforming further comprises: transforming the subsequent unmarked contexts into the additional tainted contexts for a time period defined by receiving an indication of manual termination, or by a self-terminating configuration value.