Currently, when you delete a user the only way to show that the content from one user to another user in the enterprise events are track two separate events:
- UPLOAD (Creation of the new folder with the user's naming convention)
- MOVE (From unknown location/user, to the new folder)

This mean you needs to track the newly created parent.name and the move event with the item.name. I'm proposing two potential enhancements:

1) Enhance the MOVE event to show the source user/item details AND target user/item details.
2) Create a new TRANSFER_OWNERSHIP event so that you can distinguish between a regular MOVE event and a transfer event as a result of deleting a user.