Cyber-forensic log analysis