Incident investigation mac log files